Static task
static1
Behavioral task
behavioral1
Sample
621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953.exe
Resource
win10v2004-20230703-en
General
-
Target
621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953
-
Size
349KB
-
MD5
3dfbd9cf234fb83e2617a9f9ef6789c6
-
SHA1
3015f90792aaf59f15145bb36ba612b48e8d5f06
-
SHA256
621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953
-
SHA512
4ef55dd1f48bebe8126d97eb4f6c44c7fdc53b7479f31fa3f61e1d610693bfd9e2fe232e12ba696cb9da47b2cef8c51d9cea1e40df0658f9ec613144c8ec674c
-
SSDEEP
3072:SbakQj+dtgGWm2GWpQYkckMIo45AEc0MOne4uUSYsr6DZEOcoRcfbuCUilpO1AGk:0RVEW+u+ZPWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953
Files
-
621ec4cbd6801136ed92871458ca6a9f37ed378c1904ff994c85f841985d7953.exe windows x86
6bfd30a8f07d01a30b4e68a79728f21c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageW
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_wcmdln
_wcsicmp
_winmajor
abort
calloc
exit
fprintf
free
fwrite
malloc
memmove
signal
strncmp
vfprintf
wcscat
wcscmp
wcscpy
wcsrchr
setupapi
SetupCloseInfFile
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupFindFirstLineW
SetupFindNextLine
SetupGetLineCountW
SetupGetStringFieldW
SetupOpenInfFileW
gdi32
CreateFontIndirectW
DeleteObject
GetDeviceCaps
user32
CheckDlgButton
DialogBoxParamW
EnableWindow
EndDialog
GetDC
GetDesktopWindow
GetDlgItem
GetParent
GetWindowLongW
GetWindowRect
KillTimer
LoadStringW
MessageBoxW
PostMessageW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetTimer
SetWindowLongW
SetWindowPos
SystemParametersInfoW
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ