Static task
static1
Behavioral task
behavioral1
Sample
1528da2cdb548e2f2e25db42a0b4d677.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1528da2cdb548e2f2e25db42a0b4d677.exe
Resource
win10v2004-20231215-en
General
-
Target
1528da2cdb548e2f2e25db42a0b4d677
-
Size
749KB
-
MD5
1528da2cdb548e2f2e25db42a0b4d677
-
SHA1
1bff2f34d51c0c55248feaa173c4258e9eda1fcf
-
SHA256
17e0205c75a94e1fa8ed769db9b51df925762e7ec9f3adede88cecf4b9fdb161
-
SHA512
991946ec5555c9e61a44ed28ca3af009e32dd9394310ca250e70bf43fab4a90d2637fb49a82d1a3136f39491e3dd018bc6e0ed89feebbb14dfae488b6e3b55fc
-
SSDEEP
12288:E3lrZNaS3rx/QmZnTIbkzBPOXk8tmU/S4lBvZ:4ZNaS3rj+90Up/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1528da2cdb548e2f2e25db42a0b4d677
Files
-
1528da2cdb548e2f2e25db42a0b4d677.exe windows:4 windows x86 arch:x86
250b4634b400f6ca342bef5e6e225acd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetLastError
SuspendThread
SetVolumeLabelA
ResumeThread
HeapCreate
FindAtomA
GetCommandLineA
CreatePipe
GetVersion
GetModuleHandleA
GetFileType
GetModuleFileNameA
GetDriveTypeA
WriteFile
CreateThread
IsBadWritePtr
CreateSemaphoreW
HeapFree
RemoveDirectoryA
CreateDirectoryA
ExitThread
FindClose
SetStdHandle
RemoveDirectoryA
uxtheme
CloseThemeData
GetThemeTextExtent
DrawThemeBackground
IsThemeActive
GetThemeTextMetrics
GetThemeSysSize
OpenThemeData
GetWindowTheme
CloseThemeData
GetThemeBool
DrawThemeEdge
GetThemeColor
SetWindowTheme
perfdisk
CloseDiskObject
CloseDiskObject
CloseDiskObject
CloseDiskObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE