Static task
static1
Behavioral task
behavioral1
Sample
87ff4ab4fc1fb86c06ae1f4e26ab1f4e7b7fad7b2c7d55ceae5989ef39341fbd.exe
Resource
win7-20231129-en
General
-
Target
87ff4ab4fc1fb86c06ae1f4e26ab1f4e7b7fad7b2c7d55ceae5989ef39341fbd
-
Size
316KB
-
MD5
89afff84cacbfb9e34baed195e1a2e34
-
SHA1
0aba346708e9c57bad2749330acae671c6c2d4f2
-
SHA256
87ff4ab4fc1fb86c06ae1f4e26ab1f4e7b7fad7b2c7d55ceae5989ef39341fbd
-
SHA512
94ef60e4bfdfb96aa4b8b115475ed864bd0a971c87fdcb8af810ee11829977bf2d1e9eb60556cff8bee1828557cf64be57cbccc70a1c9636c775b4e696b75c3d
-
SSDEEP
6144:ZiDK1FcQeSk2y/DaxY8rOmh1UATvpWFYuTPx8JkGK5n:sK7cQNkJQYx6DFuTPx8VK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87ff4ab4fc1fb86c06ae1f4e26ab1f4e7b7fad7b2c7d55ceae5989ef39341fbd
Files
-
87ff4ab4fc1fb86c06ae1f4e26ab1f4e7b7fad7b2c7d55ceae5989ef39341fbd.exe windows:4 windows x86 arch:x86
30e7a08fb18873a0730e4486f3f183c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
VirtualFree
FreeLibrary
VirtualAlloc
VirtualProtect
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ