Static task
static1
Behavioral task
behavioral1
Sample
03ebc2380575e9bf4cd9186db3340af182c688d332a019510c6e55bd00a1391c.exe
Resource
win10v2004-20240226-en
General
-
Target
03ebc2380575e9bf4cd9186db3340af182c688d332a019510c6e55bd00a1391c
-
Size
505KB
-
MD5
82b95de9ffa6bc9264734e9121e41b66
-
SHA1
8502bd292e301e5500cd87537ba79decc854f868
-
SHA256
03ebc2380575e9bf4cd9186db3340af182c688d332a019510c6e55bd00a1391c
-
SHA512
5c1e3730660339e2d7182b26ee8d671918c8bd8bf3410bea02fc2cb6e9296d6664224291b4561a02431f82e2453dc2bee4f19083153422af57314e0c333f0ec1
-
SSDEEP
6144:jre8uT58rY642SGXvDAgRGe9xEbdHAXnzAMubnYlxhNWG/wRiTIeVf+Utz3:jqx58rYSdke+mnz5sCNT/vXVfnh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 03ebc2380575e9bf4cd9186db3340af182c688d332a019510c6e55bd00a1391c
Files
-
03ebc2380575e9bf4cd9186db3340af182c688d332a019510c6e55bd00a1391c.exe windows:5 windows x86 arch:x86
9b59fefe51f9320ef06302fa1d57096f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
IsBadHugeReadPtr
GetCommState
SetDefaultCommConfigW
HeapFree
GetComputerNameW
LockFile
ConnectNamedPipe
GetModuleHandleW
GetDateFormatA
GetConsoleCP
GlobalAlloc
VirtualFreeEx
LoadLibraryW
GetConsoleAliasExesLengthW
GetConsoleAliasesLengthW
SetConsoleTitleA
SetCurrentDirectoryA
GetCurrentDirectoryW
GetProcAddress
FindVolumeMountPointClose
LoadLibraryA
HeapWalk
GetModuleFileNameA
FindFirstVolumeMountPointA
FreeEnvironmentStringsW
DeleteCriticalSection
SetCalendarInfoA
CloseHandle
CreateFileW
EnumCalendarInfoA
GetAtomNameW
HeapReAlloc
HeapAlloc
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetLastError
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
FlushFileBuffers
user32
LoadIconA
advapi32
RegCreateKeyA
ReadEventLogW
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ