Static task
static1
Behavioral task
behavioral1
Sample
be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b.exe
Resource
win10v2004-20240709-en
General
-
Target
be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b.exe
-
Size
47KB
-
MD5
cc24dda664febc6b2d524531d2bd6289
-
SHA1
91f6f497f293132ed1cfcb232df4ddd7d9860b3f
-
SHA256
be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b
-
SHA512
71c4a716f0b510bdf927def92032b6971ad44e44ffa0655421c0a211a5dd96461c2c72fc7d42e358cd0ed07d9b38741e4b0942897f9da759428d01c9b273f83c
-
SSDEEP
768:xgkH1Rj6JuBwIyd/PUvm/+EC8mECTgVs/bxSeX2YsPslpIqzTzRDDRAKE:s+lyNPUvyhUECT1XQslpICPRDDR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b.exe
Files
-
be12b5c32cfd3f92d558cad07b0901b329ee2def1a23cca31ecbb97f01a6256b.exe.exe windows:5 windows x86 arch:x86
db3ba5a38c467c1467d8cab70dfeeb13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_initterm
_except_handler3
_onexit
_adjust_fdiv
__set_app_type
__p__fmode
__p__commode
__dllonexit
__getmainargs
__p___initenv
exit
_XcptFilter
toupper
_exit
rand
_controlfp
srand
_kbhit
kernel32
GetConsoleWindow
SetConsoleCursorPosition
EnumResourceTypesA
GetStdHandle
gdi32
GetTextExtentPoint32W
RectVisible
CreateDIBitmap
EnumMetaFile
GetCharWidthA
resutils
ResUtilResourceTypesEqual
ResUtilStopResourceService
ResUtilVerifyPropertyTable
ResUtilGetSzProperty
rpcrt4
NdrRpcSmClientFree
NdrProxyGetBuffer
RpcImpersonateClient
NdrConformantVaryingArrayMarshall
NdrAllocate
ws2_32
WSALookupServiceBeginW
WSASetServiceA
WSAAsyncGetHostByName
gethostbyname
WSAJoinLeaf
comdlg32
ChooseFontW
PrintDlgW
PrintDlgExW
user32
ShowWindow
DrawTextA
ShowWindowAsync
EmptyClipboard
PtInRect
OpenWindowStationA
mscms
AssociateColorProfileWithDeviceA
IsColorProfileTagPresent
GetStandardColorSpaceProfileA
wsnmp32
ord400
ord604
ord102
ord206
ord602
ord103
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ