Static task
static1
Behavioral task
behavioral1
Sample
903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd.exe
Resource
win10v2004-20240419-en
General
-
Target
903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd
-
Size
60KB
-
MD5
50b50d52db6a6c2c8153a16b1ebb25b2
-
SHA1
66c2bfbb0d7a1a6ae3d72f95f8370369e50eb441
-
SHA256
903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd
-
SHA512
e1ad0738cca9a9ed8b22fe381e9ed3fb143da74db275100c8739c977d03a42ed2e7db3bc12ca066590c61d6290b4db96941b98f4664701bc83fb83b855346ce9
-
SSDEEP
768:dxFGpmLfG3d8O2Pbx76PYMjCFpgsG3jgfcLI+PXwDxf4oeBlC:dxFG+GYKYMjC1G3jpPXcxgBlC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd
Files
-
903ffb25effb1d787832e93629df831ae3abfb5ef5e3be744369c091ac6ffffd.exe windows:4 windows x86 arch:x86
6b89f17863176bece6c0a1e507b58cd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetLastError
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
CloseHandle
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
ReadFile
CreateFileA
SetEndOfFile
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE