Static task
static1
Behavioral task
behavioral1
Sample
13a5cb084c482e3ac1e388e3b94a825a90b7d028dd5892c3d19e7bbb61658238.exe
Resource
win7-20240508-en
General
-
Target
13a5cb084c482e3ac1e388e3b94a825a90b7d028dd5892c3d19e7bbb61658238
-
Size
2.4MB
-
MD5
0f992c86a1982a2cd5a7e9a25e785f4f
-
SHA1
6520ca71f8f2b906b4fe0f99e8f89791ed967760
-
SHA256
13a5cb084c482e3ac1e388e3b94a825a90b7d028dd5892c3d19e7bbb61658238
-
SHA512
20b3cd111575c7a1bde7f222c7e58e90f17ceab381e33970279eb7431ce3813e3c3577a49c1f10ebc626e574eb73a03bb9e4758e79e4276c837e83cca4603cf2
-
SSDEEP
49152:Vd/9PsiYSUkeUpM7fS6+rb0uNsmxA7r0vU6rfGb4hO1v5:f/9kiYS0Ui7fSjsD3YU6rfGb4s1v5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a5cb084c482e3ac1e388e3b94a825a90b7d028dd5892c3d19e7bbb61658238
Files
-
13a5cb084c482e3ac1e388e3b94a825a90b7d028dd5892c3d19e7bbb61658238.exe windows:4 windows x86 arch:x86
343c8e631ed2bcce22d31ee2532f63de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTempPathA
CompareStringW
CompareStringA
RtlUnwind
RaiseException
CloseHandle
GetFileType
GetLastError
CreateFileA
WriteFile
ReadFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedIncrement
SetStdHandle
SetEndOfFile
SetFilePointer
SetHandleCount
GetStdHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetEnvironmentVariableA
user32
MessageBoxA
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE