Static task
static1
Behavioral task
behavioral1
Sample
0204a965d2fce56aac85df388f27a278.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0204a965d2fce56aac85df388f27a278.exe
Resource
win10v2004-20231215-en
General
-
Target
0204a965d2fce56aac85df388f27a278
-
Size
110KB
-
MD5
0204a965d2fce56aac85df388f27a278
-
SHA1
39cc3b78e87f6a6eec983bfb92a88388f93c3ca1
-
SHA256
5cb7463b5fde03a7dd0b32651b207920cd4b6e4aa77e45957b6c53ff458e7044
-
SHA512
94bd8aafb384624868e9461d3ce79a466c45cdaadbe5a7fd42c7288e49389310418e69b533068271e12e4ac5676931e28ae9f33617b8376460e3f6602d558a2e
-
SSDEEP
768:hUsLL2ReHY7qCVmByFXoZk02i14lzg+HkvaoKUgPfTeqGqbjX1ay3Iun136nt:htL2R8upEmmOlzgCkvNcPfT6q/kyDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0204a965d2fce56aac85df388f27a278
Files
-
0204a965d2fce56aac85df388f27a278.exe windows:5 windows x86 arch:x86
c55c9989c9eb9e5f8782d7857d31ccb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
ExitProcess
lstrlenA
advapi32
RegQueryInfoKeyW
RegEnumValueA
user32
GetMenu
DrawTextW
AppendMenuW
GetWindowTextLengthA
DrawIcon
GetDlgItem
Sections
.mncki Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ognk Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ljlbn Size: 67KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kemh Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mglcc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ