Static task
static1
Behavioral task
behavioral1
Sample
19923d744ef7a6ffa2b8ea8f8adac9ba736090e04bc9f33610c71deb7e709def.exe
Resource
win7-20240221-en
General
-
Target
19923d744ef7a6ffa2b8ea8f8adac9ba736090e04bc9f33610c71deb7e709def
-
Size
1.1MB
-
MD5
3ad60cf4f9cfab3ffe75ba1666e0bb33
-
SHA1
01080eeb296aceb03f2a986b6af9f27a7d7e8366
-
SHA256
19923d744ef7a6ffa2b8ea8f8adac9ba736090e04bc9f33610c71deb7e709def
-
SHA512
4f4757f8b59dc2ef8c114e5ddfeececba26ced653ee878324d9213a1c967479a01f3e3bd7e801944f883a83480434aecaed95714f03ef842af8a4738ce8bbf7e
-
SSDEEP
24576:EZLzm2RyofZCfsHKAWHsm+3MnduJaaHV/V8cCD2b50Z:+m2R1faAWHP+3MnduJaaHtVH950Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 19923d744ef7a6ffa2b8ea8f8adac9ba736090e04bc9f33610c71deb7e709def
Files
-
19923d744ef7a6ffa2b8ea8f8adac9ba736090e04bc9f33610c71deb7e709def.exe windows:4 windows x86 arch:x86
36972e38ab26698d1eda89b19e094eaf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
VirtualProtect
ExitProcess
GetVersionExA
GetModuleFileNameA
WriteFile
VirtualAlloc
GetProcessHeap
GetSystemInfo
HeapAlloc
GetStringTypeA
LCMapStringW
HeapReAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
IsBadWritePtr
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
shell32
ShellExecuteExA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ