PaintLine
Static task
static1
Behavioral task
behavioral1
Sample
f0b12e5778d97656a52fb8a6afa54d0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f0b12e5778d97656a52fb8a6afa54d0b.exe
Resource
win10v2004-20231215-en
General
-
Target
f0b12e5778d97656a52fb8a6afa54d0b
-
Size
544KB
-
MD5
f0b12e5778d97656a52fb8a6afa54d0b
-
SHA1
0c8a45ad202607664604c3a09059d000c14515b0
-
SHA256
49d664bc19a42ba07f99237a582a73a665e37864e3fa37f7cdfc2026154bd392
-
SHA512
c9472d86ab6bc489b31eac310ba74c267f88b2e3d427aadcc494f8e9646710bcdaa0e1b57b0625dd87616b62f61970328a3faa28eac45c2493a4619b80d978cf
-
SSDEEP
6144:G70i+GrKD03csEDYiKC6cveH+By0bgHgVDDjdGCQO0rd:G70hGrKmcsGKC6cvsQF1hAHrd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b12e5778d97656a52fb8a6afa54d0b
Files
-
f0b12e5778d97656a52fb8a6afa54d0b.exe windows:4 windows x86 arch:x86
eda0fbcb7a5ceeceba280b88e0250e2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect
GetCurrentThread
GetConsoleCP
GetACP
GetLastError
gdi32
AddFontResourceTracking
oleacc
DllCanUnloadNow
gdiplus
GdipSetPenUnit
winmm
waveOutSetPlaybackRate
oledlg
OleUIUpdateLinksA
imagehlp
SymSetSearchPath
Exports
Exports
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 80.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdatat Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eieu Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.efes Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ