Static task
static1
Behavioral task
behavioral1
Sample
asd.exe
Resource
win7-20240903-en
General
-
Target
asd.exe
-
Size
419KB
-
MD5
48ae927ff130dd0e9883d41a9cdf6514
-
SHA1
9afa190d5e46e32aec767e2f3d366e268ce5b0ce
-
SHA256
e6c75ba5d611e79d680ea437a8d874d2d001003fd2297c0f20f1ed06471bc002
-
SHA512
741a3c0f7cd84df552beda05fc119c2331591756af1ed6108bc65c4c10c8da35126958e6d6cdf541949c5286d03fe26d746c8d136853424aa0c84b488f27dc3a
-
SSDEEP
6144:kuDOb4DK/BL8N43LPLG/9MnZLFvISFyxjHUAwkSP8:DD04GpoNcL6/QZLFvIbxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource asd.exe
Files
-
asd.exe.exe windows:5 windows x86 arch:x86
c00735f05d13fd7a2bf1a7281832b72f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
EnumCalendarInfoA
WriteConsoleInputW
TlsGetValue
SetComputerNameExA
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
InterlockedCompareExchange
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
FindNextVolumeMountPointA
CancelDeviceWakeupRequest
EnumTimeFormatsA
LoadLibraryW
ReadConsoleInputA
GetCalendarInfoW
GetVersionExW
GetFileAttributesA
FindNextVolumeW
GetShortPathNameA
VerifyVersionInfoW
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
CopyFileA
SetFileAttributesA
GetTempFileNameA
GetAtomNameA
LoadLibraryA
InterlockedExchangeAdd
SetCalendarInfoW
OpenEventA
GetCommMask
EnumDateFormatsA
GlobalUnWire
GetDiskFreeSpaceExW
EnumCalendarInfoExA
LCMapStringW
GetVolumeInformationW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
Sections
.text Size: 379KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ