Static task
static1
Behavioral task
behavioral1
Sample
0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340.exe
Resource
win7-20240708-en
General
-
Target
0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340
-
Size
10KB
-
MD5
72625fba0f89548239c54f0bcd844728
-
SHA1
d66ddeb0c770d1545637f7ddaad7afcd60182fbe
-
SHA256
0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340
-
SHA512
a9d0052d51857730a05406edcf46e5179de2ebe42923f22a8d976809d0c66b89f319b81982a7aafa56d10abf912e654a5a3553061ffec385e04998a1782959d7
-
SSDEEP
96:FyYucXlgwXzv3L+Ud9BDoiR+YyM4TtspKW0ffl2tsB1JxGEhBV2qh9C7tCEW8q+:FzuWgs7+MR+2itojtWJxThBVthuWV+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340
Files
-
0d047b7e3d8841a58253b9f32eb62c6c6aa735905839233edcd277ffb5246340.exe windows:5 windows x86 arch:x86
b71d5b4a68d42edd8dc49888ef78cb5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
srand
mbstowcs
_decode_pointer
rand
kernel32
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
DeleteFileA
DeleteFileW
CopyFileW
MoveFileW
LoadLibraryA
GetProcAddress
GetTickCount
FreeLibrary
IsDebuggerPresent
user32
FindWindowA
wsprintfW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ