Static task
static1
Behavioral task
behavioral1
Sample
a4514b81a9bbc59efaf58632fca452ec.exe
Resource
win7-20240221-en
General
-
Target
a4514b81a9bbc59efaf58632fca452ec
-
Size
91KB
-
MD5
a4514b81a9bbc59efaf58632fca452ec
-
SHA1
cbe7ae542b497f5706a20b3e79e21bc7ab798278
-
SHA256
d46cf36e78016931bd80368c3be24d29de7df6c2313e59756d37dd5aa79f3725
-
SHA512
8f1e96cfb5c3c52bf08aedae3f331dab91d61cdc8b1e633aa883043c06cb43c3e68689c784c7700a5769d0a1551c8d69aba0fe046ac4c9ac99c65bf058655745
-
SSDEEP
1536:0IApfuE8dfxP8sUySVk6i/biohhOEuf11Bhpygrxd5CO6c:0IAhuE8dfxO/i/+Y4EE5hMgrxqO6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4514b81a9bbc59efaf58632fca452ec
Files
-
a4514b81a9bbc59efaf58632fca452ec.exe windows:5 windows x86 arch:x86
fd27c2357b00502888e77217a5e9fe5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrlenA
GetCurrentProcess
OutputDebugStringW
GetCommandLineA
Sleep
GetModuleFileNameW
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
OutputDebugStringA
lstrcpyA
HeapReAlloc
GetStringTypeW
LCMapStringW
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
DecodePointer
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
WriteFile
GetStdHandle
HeapAlloc
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
RtlUnwind
HeapSize
IsProcessorFeaturePresent
user32
MessageBoxA
shell32
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ