Static task
static1
Behavioral task
behavioral1
Sample
084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20.exe
Resource
win10v2004-20240419-en
General
-
Target
084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20
-
Size
52KB
-
MD5
8acfd7f90074ba162a519b70f7e81923
-
SHA1
daf2cf0397a0d6274ad54ebbb4fa98b1a93197bf
-
SHA256
084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20
-
SHA512
bdb3cb93a7c4fe39a6431d353002e9b21ef0225410eb87f88f7de958fe6508424ef4c034003f801095963f5e635293f1fcf9b7706dc91292d556f0956190fe9c
-
SSDEEP
768:z4jyYXc6gnnYTDVWJsjn4ZR1MNvioiB9e0mdkEtkIDHRrca6o+u:z420gnVJi4rkviyWoRgo5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20
Files
-
084100fdea8536759d347a6883999c5b391131599809052b2b74510e133a3d20.exe windows:4 windows x86 arch:x86
a00b2c226d161ebf6a7c4c9b2997e80d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetProcAddress
GetCurrentProcess
HeapSize
FlushFileBuffers
SetStdHandle
CloseHandle
LCMapStringW
LCMapStringA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetOEMCP
GetACP
LoadLibraryA
SetFilePointer
GetLastError
GetCPInfo
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
VirtualAlloc
WriteFile
IsBadWritePtr
HeapCreate
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
QueryPerformanceFrequency
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
HeapDestroy
VirtualFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
user32
WaitMessage
GetDC
ReleaseDC
TranslateAcceleratorA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
BeginPaint
EndDialog
PostQuitMessage
DestroyWindow
EndPaint
DefWindowProcA
ShowWindow
DialogBoxParamA
CreateWindowExA
LoadCursorA
UpdateWindow
LoadIconA
LoadAcceleratorsA
RegisterClassExA
LoadStringA
gdi32
BitBlt
SelectObject
TextOutA
DeleteDC
CreateDIBSection
DeleteObject
CreateCompatibleDC
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ