Static task
static1
Behavioral task
behavioral1
Sample
b1398102526a7983f69276a1b821e270N.exe
Resource
win7-20240903-en
General
-
Target
b1398102526a7983f69276a1b821e270N.exe
-
Size
240KB
-
MD5
b1398102526a7983f69276a1b821e270
-
SHA1
17e6ed970fdaa06fd9deabae97aab4a21f00220f
-
SHA256
c84c4fcbe5130e4ba7abda1240b02267d0002b1313e6568790c610d961b44fba
-
SHA512
ccacc0ae46cb310433320f1cd61961e9e6c4ce301e0b3876dd9189592b33b7dbeba26855ab6b1d313811e19d8187c181854510104baa4d49f58bcc3ce527b0da
-
SSDEEP
6144:R7aqcWxc5tTBsJWKFGUOfCZcPYozaA1VeLj:hFpxc5tTG7FE6Kw1A1Vuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1398102526a7983f69276a1b821e270N.exe
Files
-
b1398102526a7983f69276a1b821e270N.exe.exe windows:4 windows x86 arch:x86
8ee1d6ac14557b768dcccdd9bb83afc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleW
GetEnvironmentVariableW
GetLastError
CreateDirectoryW
FindClose
FindFirstFileW
CloseHandle
CreateFileW
FreeLibrary
OpenProcess
WideCharToMultiByte
TerminateProcess
GetCommandLineW
GetModuleFileNameW
CreateProcessW
lstrlenW
GetTempPathW
GetModuleHandleA
GetOEMCP
GetACP
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
LoadLibraryA
IsBadReadPtr
HeapFree
DeleteFileW
GetTempFileNameW
CopyFileW
RtlUnwind
InterlockedDecrement
InterlockedIncrement
RaiseException
GetStartupInfoW
GetVersion
ExitProcess
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetModuleFileNameA
SetFilePointer
ReadFile
IsBadCodePtr
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
shell32
CommandLineToArgvW
psapi
GetModuleFileNameExW
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE