Static task
static1
Behavioral task
behavioral1
Sample
b577120227b65acc96ef06d71e7b8c40_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b577120227b65acc96ef06d71e7b8c40_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
b577120227b65acc96ef06d71e7b8c40_exe32.exe
-
Size
20KB
-
MD5
b577120227b65acc96ef06d71e7b8c40
-
SHA1
711527c80f21307a4a6ead7eb663791dca4aea84
-
SHA256
f6eb8167936d3b4e12a9fef30698472cb748d26c9933011f9f08ac51b7e09eac
-
SHA512
40769ae71898b12680fb4e82042f7b47e02bbaa7ed6d4370e0977ad750b3ce35e9693fea03f9b5675a6c011fe33b047c80285a88e5535b9a71c072884a56d6af
-
SSDEEP
192:lrH0bTqpDNxjVD3l0Eu+X6b7VWLnrwmsSl7jaeYvLNpjRawdzYKCcXG+850nED:lrd1jR3l1cbELnrfjoRWw3X58CA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b577120227b65acc96ef06d71e7b8c40_exe32.exe
Files
-
b577120227b65acc96ef06d71e7b8c40_exe32.exe.exe windows:5 windows x86
93f3c3f7fa917eec6b457a216663e185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
PostQuitMessage
DispatchMessageA
UpdateWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetClassLongW
SetWindowTextW
ShowWindow
GetKeyboardState
kernel32
GetProcessHeap
GetModuleHandleA
HeapCreate
HeapFree
DeleteFileW
CreateFileW
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
HeapAlloc
gdi32
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ