Static task
static1
Behavioral task
behavioral1
Sample
deee9f327b7c9dd1e154d59b976f432a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
deee9f327b7c9dd1e154d59b976f432a.exe
Resource
win10v2004-20240226-en
General
-
Target
deee9f327b7c9dd1e154d59b976f432a
-
Size
13KB
-
MD5
deee9f327b7c9dd1e154d59b976f432a
-
SHA1
b932e69e1eeb3497145b3a77d1da012a23df6306
-
SHA256
e213e74ae1bbc2f9114094c7ef45e40f775f5c4aaf49e464decd72b9282088f4
-
SHA512
3a364338a4059b5330ba65fafd1771e516e9385fa67ca8ce8d5aa1a010a34030a4a36aee75c8266fa45ac6b5cf1158b9077182e42f30741af51ab9fe49ed3204
-
SSDEEP
192:BgyG1g7sEtqH4fm2iPqFfvlYYV/v2LJbsjNvB2M79EqMwTFWZeWxbt2FOu:Bgxg9iy3D2JbsjiM7BFWZeWxb4F7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource deee9f327b7c9dd1e154d59b976f432a
Files
-
deee9f327b7c9dd1e154d59b976f432a.exe windows:4 windows x86 arch:x86
9a5a59f8aed8fe2db0511684fdeffe59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
user32
DispatchMessageA
GetMessageA
PostThreadMessageA
CharPrevA
CharNextA
CharLowerA
LoadStringA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
msvcrt40
exit
__set_app_type
__p__commode
??3@YAXPAX@Z
fprintf
__p__iob
vfprintf
sprintf
??2@YAPAXI@Z
printf
memset
__CxxFrameHandler
_EH_prolog
_exit
_XcptFilter
_getch
__p___initenv
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__fmode
_except_handler3
_controlfp
kernel32
GetLastError
GetCurrentThreadId
CreateThread
CloseHandle
lstrcpyA
GetModuleFileNameA
lstrcmpA
lstrlenA
lstrcatA
WideCharToMultiByte
MultiByteToWideChar
FormatMessageA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.hatered Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE