Static task
static1
Behavioral task
behavioral1
Sample
13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b.exe
Resource
win10v2004-20241007-en
General
-
Target
13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b.exe
-
Size
113KB
-
MD5
abf9e6a19188c280a8402ea7a141f1cc
-
SHA1
d3abec862715e0acf44e062667564af3ef2d07a9
-
SHA256
13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b
-
SHA512
d2fb30ee5a38cc1c68ccc1082eae5c0ae7cbd2613f217ec5d14955db1f1f8fbccc4bc08c86c067f833b42b6cb57bdba8ae260c87dd4f36ababa2a1e690c6e599
-
SSDEEP
1536:HCW3sBK3avjaHyimb4lpXlz/AoJut3pdTrjlpVMJ+XbwDotizl7D4tjU+:Hj3SK3aLaHppVz/vuDT9piJ1zl34tjU+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b.exe
Files
-
13b91c23a90a78f3651646bce6d77e8cb091dc199f95f85715729252f3c6590b.exe.exe windows:4 windows x86 arch:x86
020bde691dbcdf93c9bf181f8ee102e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetExitCodeProcess
GetLogicalDrives
TlsAlloc
SetLastError
GetConsoleTitleA
GetStringTypeW
HeapFree
GetShortPathNameW
SetPriorityClass
GetVersion
GetModuleHandleA
GetLocalTime
HeapCreate
SetFilePointer
GetModuleHandleW
GetStdHandle
GetLastError
lstrcatW
SetEnvironmentVariableA
GetDriveTypeA
lstrcmpiA
IsValidCodePage
netshell
DllRegisterServer
HrLaunchConnection
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE