Static task
static1
Behavioral task
behavioral1
Sample
72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c.exe
Resource
win10v2004-20230915-en
General
-
Target
72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c
-
Size
172KB
-
MD5
791d7517dacbaf1c955db2e625a58e3a
-
SHA1
805790f78c76572623e9c1ed335c2b01fec26d00
-
SHA256
72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c
-
SHA512
b5cc93b8b8d90bebc38d5ce9eda9d33272e5d5c7485d10da096f04ba2f6fbf75f35fb934c3a7e2fc694ca3c116c7ae363eb550af3f7009219655cdc433bd2990
-
SSDEEP
1536:2/tN0wNeiwZYMlF3VolnLXmI0OLBNQtWubFU2O4duxo+m:6XIiwqMldVCnLXmbOLBNQIuPcxo+m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c
Files
-
72b736917b02be5f67f228e80e6a73794f5c061ac87430962c557e049166224c.exe windows:4 windows x86
afd7c6dbb455ead82f3df060f63ebe18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
MessageBoxA
GetSystemMetrics
LoadImageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyIcon
gdi32
GetStockObject
kernel32
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CloseHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ