Static task
static1
Behavioral task
behavioral1
Sample
b13061947d4664a29f8065a69ca56d30N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b13061947d4664a29f8065a69ca56d30N.exe
Resource
win10v2004-20240802-en
General
-
Target
b13061947d4664a29f8065a69ca56d30N
-
Size
24KB
-
MD5
b13061947d4664a29f8065a69ca56d30
-
SHA1
5a2c4193353108af92b433276bbfb3819f02dd82
-
SHA256
6c198a9afc31818134ab1f2a8d6648efdd501c9479ffc07fd319e120d0d7e4b3
-
SHA512
faa83106d0c66b43ab2a00f16bf9f6d95c5978188d89cafc8ab9ba4041ab8375599fb24bf4907e14a821b5564757bf52b7c4fcf7c3bf6d0e8f6eb4cbe008f9e9
-
SSDEEP
192:SYCIcKJHN6u2stZM/yE1nZRliOyMOHz9ICCP1oynnTickv:SYCIcKyuNG/yInZR/yMOT9ICs15TicA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b13061947d4664a29f8065a69ca56d30N
Files
-
b13061947d4664a29f8065a69ca56d30N.exe windows:4 windows x86 arch:x86
07688f87f83dd856436132b715f940d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
CloseHandle
TerminateProcess
GetExitCodeProcess
FindClose
DeleteFileA
SetFileAttributesA
FindFirstFileA
CreateMutexA
GetLastError
FormatMessageA
OpenProcess
LocalFree
CopyFileA
GetModuleHandleA
GetProcAddress
FreeLibrary
GetStartupInfoA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
sscanf
strrchr
strncmp
localtime
time
fprintf
rename
fclose
ftell
fseek
fopen
strncpy
vfprintf
printf
mktime
free
fread
malloc
strstr
_stricmp
_getcwd
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strspn
memmove
strchr
sprintf
atoi
fputs
psapi
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ