Static task
static1
Behavioral task
behavioral1
Sample
d8ce5c15818144c17bbb3bf250494439.exe
Resource
win7-20240903-en
General
-
Target
d8ce5c15818144c17bbb3bf250494439.exe
-
Size
296KB
-
MD5
d8ce5c15818144c17bbb3bf250494439
-
SHA1
f2e47e83562b755c8b867983e2633bf799e737fb
-
SHA256
351b08447b3ac2527ab994604bdd91e43044c962dc26de2ad12f2c46d1eacabd
-
SHA512
05baef07c671cb86c524c55b7cb5a710c92ca864447e2bf8f4044ad73a1c56c4cbee4d574faf6296b04d4981238a2e0c881de1d316047019ffc7d870bfe650ac
-
SSDEEP
3072:xF7ZPrB7b0RmL9S9y5FIgaAGw+hpQ443mI8OdsbwFy4lUcyMc4sglLVlR97hgkwg:775ms9S9y5OaGVq4A8O+B4SRMqofhf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8ce5c15818144c17bbb3bf250494439.exe
Files
-
d8ce5c15818144c17bbb3bf250494439.exe.exe windows:5 windows x86 arch:x86
e693475f4297d059effc41eaa568befa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
SetDefaultCommConfigA
WriteConsoleOutputCharacterW
UpdateResourceA
InterlockedIncrement
GetConsoleAliasA
InterlockedDecrement
Process32First
SetComputerNameW
GetTimeFormatA
SetEvent
GetProcessPriorityBoost
GetModuleHandleW
GetCommandLineA
GetEnvironmentStrings
GlobalAlloc
LoadLibraryW
GetConsoleAliasExesLengthW
WriteConsoleOutputA
GetFileAttributesW
GetModuleFileNameW
GetVolumePathNameA
SetLastError
GetProcAddress
SetFileAttributesA
GetAtomNameA
LoadLibraryA
RegisterWaitForSingleObject
AddAtomW
FoldStringW
GetModuleHandleA
SetLocaleInfoW
BuildCommDCBA
GetVersionExA
OpenFileMappingA
WriteProcessMemory
LCMapStringW
LCMapStringA
GetLastError
HeapFree
HeapAlloc
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
user32
GetClassLongW
GetMonitorInfoW
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ