Static task
static1
Behavioral task
behavioral1
Sample
d70ade932e6953c263e6acf356d63e59.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d70ade932e6953c263e6acf356d63e59.exe
Resource
win10v2004-20240226-en
General
-
Target
d70ade932e6953c263e6acf356d63e59
-
Size
39KB
-
MD5
d70ade932e6953c263e6acf356d63e59
-
SHA1
cd4c72a00602c5ae90cbf4b530fd26f1c0a2c1a7
-
SHA256
20eb2928a60b54f94ab2966c22fe69d715256632a5a80abcc0be216c25d43653
-
SHA512
31ac6433c5da6b60ed93ad13f84b8c4e61d476fce00c9251b043d849fca1f1c4ca4368bc012b75541760d35e9a3e681f2bf5d263b0bf9859a4e3426f220ad013
-
SSDEEP
768:uloRI9LVLmHxvb+v6ehemLPsJLWHa67vIgzLKbWmQHR9q2U:uSULVLeBsv7QDMIJWmQHXU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70ade932e6953c263e6acf356d63e59
Files
-
d70ade932e6953c263e6acf356d63e59.exe windows:4 windows x86 arch:x86
023e1cb8e6ae0c2bd2a3de7e852d9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
abort
calloc
cygwin_internal
dll_crt0__FP11per_process
fprintf
free
getopt_long
isdigit
localtime
malloc
mktime
optind
printf
pthread_atfork
realloc
sleep
sprintf
strcasecmp
strchr
strcpy
strlen
strrchr
strtol
time
kernel32
AddAtomA
FindAtomA
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetSystemPowerState
user32
ExitWindowsEx
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kgnbizd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE