Static task
static1
Behavioral task
behavioral1
Sample
1072d4107b4d5944adf6b3ab7050c80d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1072d4107b4d5944adf6b3ab7050c80d.exe
Resource
win10v2004-20231215-en
General
-
Target
1072d4107b4d5944adf6b3ab7050c80d
-
Size
296KB
-
MD5
1072d4107b4d5944adf6b3ab7050c80d
-
SHA1
0c46af5e7a2e0de5d64ec589f6a330a552c0cf05
-
SHA256
68803da8f625416e62234da836810e0e6e8e19e62c06ab84f3ab3fb1c120433e
-
SHA512
a5aa9349e3deadcb81bb1ff8fbb5e9b084fcf5884f40076be5fff37a74c15e7c0836759bbe3253f6d6ef264591642123de4e37a4610602969ba2b4eb5f4b30d5
-
SSDEEP
6144:itCEsD80aKV2OrZiRcbnUvQIgwAZU3vniRp8svk0vy:ECEsD8bUJrZiR+qQI4Ui+svv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1072d4107b4d5944adf6b3ab7050c80d
Files
-
1072d4107b4d5944adf6b3ab7050c80d.exe windows:4 windows x86 arch:x86
61a760e7d283c156cc4104eecedb12bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
EndDialog
advapi32
RegOpenKeyExA
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
comctl32
PropertySheet
Sections
.bss Size: - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 171KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE