Static task
static1
Behavioral task
behavioral1
Sample
0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313.exe
Resource
win10v2004-20241007-en
General
-
Target
0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313.exe
-
Size
119KB
-
MD5
1dd8993e466276f172ffc58801a96504
-
SHA1
ff1a66ba291a149db595e7ad159e8a0817510dab
-
SHA256
0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313
-
SHA512
61d50bddaaaae79181f71888d67e4856351131287545ac23e48b55fb093187d92cb7accba1eaff7571492ed94425855ae49ffc1199101564c6c3a63952756103
-
SSDEEP
3072:ReCwIyLskoVuv3BFUeTjc4fNzy49URULDs8e6p:koc5eSjcww49FLsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313.exe
Files
-
0c29ae6391563ad73ba50c09451ef9a4494d5d55c20717db315ddfe975c70313.exe.exe windows:4 windows x86 arch:x86
d90b48a024eab1320ea0d4f7bc2b4f4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
GetLastError
InitializeCriticalSection
lstrcatA
ReadConsoleA
GetLocalTime
lstrcpyA
FindResourceA
GetStartupInfoW
ReadConsoleA
GetFileSize
LeaveCriticalSection
SetFileAttributesA
GetModuleHandleA
FormatMessageA
ReadConsoleA
ReadFile
CreateMutexA
GetCurrentDirectoryW
CloseHandle
IsBadStringPtrW
msi
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA
MsiCloseHandle
user32
IsZoomed
IsCharLowerA
DispatchMessageA
IsWindow
PostMessageW
GetWindowLongW
SetCursorPos
SetFocus
PeekMessageW
GetWindowTextA
LoadCursorW
wsprintfW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE