Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20241007-en
General
-
Target
file.exe
-
Size
427KB
-
MD5
0feb0ed834d41cb1679420de40a5510e
-
SHA1
d4a916ef04c3cb4b1180c270bcd924d7ae7a9d73
-
SHA256
30bed3d9aafd3aa38664887f1840728db524e7f268bcb385f588764642b06b7f
-
SHA512
4727f38d260f8213dd300151863f9de66a779b3f263a7eb7558f61c6bbc69a1ff8e1724bcdeb1aa72fe30709103fb046ef235e84ccac98176715f6bf34233b83
-
SSDEEP
6144:giILFBm9kDZNRWyoAplNpwhBbi5Z6An7FTS0w4z1T:giIJBm9kb6Q3pwJimAn70Oh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
28a7972fc95d2d60fdf9b2cb63f6d190
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
TlsGetValue
SetEndOfFile
InterlockedIncrement
OpenJobObjectA
GetCurrentProcess
WriteConsoleInputA
GetComputerNameW
GetSystemDefaultLCID
CallNamedPipeW
OutputDebugStringW
GetModuleHandleW
GetCommConfig
FindNextVolumeMountPointA
GetDllDirectoryW
GetConsoleAliasExesW
EnumTimeFormatsW
GetUserDefaultLangID
LoadLibraryW
ReadConsoleInputA
SetConsoleCP
GetFileAttributesA
GetTimeFormatW
SetComputerNameExW
LCMapStringA
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
ChangeTimerQueueTimer
SetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
LoadLibraryA
OpenEventA
GetModuleFileNameA
GlobalUnWire
FreeEnvironmentStringsW
GetShortPathNameW
SetFileShortNameA
GetVersionExA
GetDiskFreeSpaceExW
TlsFree
SetFileAttributesW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
HeapAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
GetStdHandle
HeapFree
CloseHandle
TerminateProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsAlloc
TlsSetValue
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
CreateFileA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
Sections
.text Size: 343KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bobov Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.farugi Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ