Static task
static1
Behavioral task
behavioral1
Sample
bb2679778b39ac34a7b3502d1d160a369e8923da3713e884ab5d28f849160283N.exe
Resource
win7-20240704-en
General
-
Target
bb2679778b39ac34a7b3502d1d160a369e8923da3713e884ab5d28f849160283N
-
Size
132KB
-
MD5
e3002bad056e8014306afa633f937ab0
-
SHA1
c5abaa720cb4649219fe26270fd6488c69f4b673
-
SHA256
bb2679778b39ac34a7b3502d1d160a369e8923da3713e884ab5d28f849160283
-
SHA512
72912c96ff6e57c50782d8917f96fcc21b1d6128dd232adbd8efe0602a395aaca7ef24fa740cd092c79c424ed65a609e4e096115aed1c6df626a7e19f4ce9876
-
SSDEEP
3072:ss4rey0tvt3GbQ13ho5JxxR2fBfdD6uLMXVr6YO1vB:rbxGbKAj+dD69XV2h1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb2679778b39ac34a7b3502d1d160a369e8923da3713e884ab5d28f849160283N
Files
-
bb2679778b39ac34a7b3502d1d160a369e8923da3713e884ab5d28f849160283N.exe windows:4 windows x86 arch:x86
433f73cce90e542c3efaf3f668b65b90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
CreateProcessA
lstrcmpA
lstrcatA
lstrcpyA
CreateDirectoryA
lstrlenA
DeleteFileA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
WriteFile
InitializeCriticalSection
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
CloseHandle
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
ole32
CoInitialize
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE