Static task
static1
Behavioral task
behavioral1
Sample
782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641.exe
Resource
win10v2004-20230221-en
General
-
Target
782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641
-
Size
386KB
-
MD5
2145eb56b2f7be3db92c5028d6c548fd
-
SHA1
1d0a278738646e19707fca35c1576ca2fb625bb8
-
SHA256
782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641
-
SHA512
ccbbe218d74b6a0cf86250e659ac630eca32b37247bfe6f69dea1c8c8f86a29ee68c7f1a951608ac9b950f5c30e895c0bc859e36584a907bd16856dc8e12ead3
-
SSDEEP
6144:M2C4H5i/M6MZfCAtBJRH4WeyflcM6MZfCAtBJRH4Weyfl:M2p56sLcjaIsLcja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641
Files
-
782bffdee7ad5821f9b98019f1d170fc8512bccc7586cd34ed1ad4331c9f6641.exe windows x86
855ffa784e32f3bf6e134f0121e0d9f4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
FindResourceA
LoadResource
LockResource
FreeResource
GetLocalTime
lstrlenA
CloseHandle
SetFilePointer
WriteFile
GetLastError
OutputDebugStringA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalReAlloc
GlobalHandle
GlobalUnlock
VirtualAlloc
SetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GlobalLock
UnhandledExceptionFilter
GetProcAddress
RtlUnwind
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
ExitProcess
HeapAlloc
GetStdHandle
GetFileType
SetHandleCount
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetStringTypeW
LoadLibraryA
FlushFileBuffers
RaiseException
GetStringTypeA
user32
SetWindowRgn
CheckMenuItem
DestroyWindow
SetWindowPos
GetClientRect
GetDesktopWindow
LoadStringA
ShowWindow
UpdateWindow
TranslateMessage
MessageBoxA
GetMenuState
RegisterClassExA
DispatchMessageA
GetMessageA
LoadIconA
LoadCursorA
DefWindowProcA
CreateWindowExA
PostMessageA
SetTimer
ReleaseDC
GetDC
PostQuitMessage
KillTimer
EndPaint
BeginPaint
InvalidateRect
EnableMenuItem
DialogBoxParamA
TrackPopupMenu
PtInRect
EndDialog
LoadMenuA
GetSubMenu
IsWindow
GetWindowLongA
EnableWindow
GetDlgItem
SetWindowTextA
SendMessageA
GetWindowRect
wsprintfA
DestroyMenu
gdi32
CreateBitmap
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateRectRgn
CreatePalette
RealizePalette
SelectPalette
UnrealizeObject
GetObjectA
SelectObject
CreateCompatibleDC
CreateDIBitmap
DeleteDC
BitBlt
CreateCompatibleBitmap
UpdateColors
CreatePen
LineTo
MoveToEx
TextOutA
DeleteObject
comdlg32
GetOpenFileNameA
comctl32
ord16
winmm
mciSendCommandA
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ