Static task
static1
Behavioral task
behavioral1
Sample
10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b.exe
Resource
win10v2004-20240412-en
General
-
Target
10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b
-
Size
1.9MB
-
MD5
4170472e3491469a19b7037d04156db4
-
SHA1
c2d7a8c02b6ce3d39c045db081c6e9ec278dd4f6
-
SHA256
10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b
-
SHA512
256ce2a2fcf4367968b04a53f4501f9e57c741c0888e22052ca084b680953e9343d83987b4d6f46fa8ad8884fdb85a1831128f22ce12144b82f255e3fe5f12f8
-
SSDEEP
49152:/PjpYykKZchdg4eRSQR6ksES0VA2EubOvkMVy2HohqFH3Yt3NHp1mbe:/bplJRSPn2fbwy2HQ1mbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b
Files
-
10decd2d62247ae6ac483925573c713e81fd77a47bd1ac4fa8b6103853f1390b.exe windows:4 windows x86 arch:x86
cd688b2cdae6fd8cd06df7233df9864b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
Beep
CloseHandle
CreateDirectoryW
CreateFileW
CreatePipe
CreateSemaphoreW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FreeConsole
FreeLibrary
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetEnvironmentVariableW
GetFileAttributesW
GetFileTime
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTime
GetTempFileNameW
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalLock
GlobalMemoryStatus
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
LockFile
LockFileEx
MoveFileW
MultiByteToWideChar
PeekNamedPipe
ReadConsoleInputW
ReadConsoleOutputW
ReadFile
RemoveDirectoryW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleScreenBufferSize
SetConsoleTitleW
SetConsoleWindowInfo
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetFileAttributesW
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsGetValue
UnlockFile
UnlockFileEx
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleOutputW
WriteFile
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_winmajor
abort
atexit
atoi
calloc
ceil
exit
exp
fclose
fmod
fopen
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
log
malloc
memchr
memcmp
memcpy
memmove
modf
pow
rand
signal
sqrt
srand
strchr
strcmp
strlen
strncmp
strrchr
system
vfprintf
wcslen
user32
CloseClipboard
EmptyClipboard
EnableMenuItem
GetClipboardData
GetKeyState
GetKeyboardState
GetMenuState
GetSystemMenu
GetSystemMetrics
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
SetKeyboardState
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 512B - Virtual size: 215B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/123 Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ