Static task
static1
Behavioral task
behavioral1
Sample
0c73584671f2193cbf82361cd5fb5a882666021d820bff19e996b77a2112dc3d.exe
Resource
win7-20230831-en
General
-
Target
0c73584671f2193cbf82361cd5fb5a882666021d820bff19e996b77a2112dc3d
-
Size
12.1MB
-
MD5
d06e61f6fd4b9c8d9711672156242ba0
-
SHA1
7e6df3bca6f1eb82062ad8a91f5a0ab99deda569
-
SHA256
0c73584671f2193cbf82361cd5fb5a882666021d820bff19e996b77a2112dc3d
-
SHA512
cba26b6bf4d14bb349a37efb1ce4168b4e572f3fe4f6e7aba4e2d3e7b291d1d75a225dc03a6f72030674018ecdde21dae00453ac1589fae90d958243655269dc
-
SSDEEP
393216:lVo1orasyuqAjADdPZaz4t4gZVNQpPgK3O8D3+hTGTmfytI:XiWHMpPZag42VNQpPR3OLhTgm62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c73584671f2193cbf82361cd5fb5a882666021d820bff19e996b77a2112dc3d
Files
-
0c73584671f2193cbf82361cd5fb5a882666021d820bff19e996b77a2112dc3d.exe windows x86
397865c786c4c8766a601cbd893174f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
Sections
.text Size: 1.1MB - Virtual size: 26.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE