Static task
static1
Behavioral task
behavioral1
Sample
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
Resource
win7-20240903-en
General
-
Target
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
-
Size
48KB
-
MD5
89eb637d610c36c2245b0dcdb8073823
-
SHA1
0f22e5bc5abbe5bee574fdcc420e529625e102f8
-
SHA256
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154
-
SHA512
ff933611a6eef68d9522ca4d3e2cbbcbb90a9b108e4642eb0db190fa7214ddad1cd888cc13292a90b93b4e7a07bb47da873b4ab10a705c055dfd04321934e7b0
-
SSDEEP
768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPru:osY0r6QroKKGCq2iW7za
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
Files
-
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe.exe windows:4 windows x86 arch:x86
f97b7e511d736d7f47e36f0d17914f3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
SetHandleCount
GetEnvironmentStringsW
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetVersionExA
WideCharToMultiByte
GetEnvironmentStrings
GetProcAddress
MultiByteToWideChar
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
LCMapStringW
GetStringTypeA
GetStringTypeW
LCMapStringA
HeapAlloc
VirtualAlloc
HeapReAlloc
user32
MessageBoxA
LoadStringA
advapi32
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~S%��u5 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE