Static task
static1
Behavioral task
behavioral1
Sample
020c7fdbe3ed643d33df07e2a4fa643a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
020c7fdbe3ed643d33df07e2a4fa643a.exe
Resource
win10v2004-20231215-en
General
-
Target
020c7fdbe3ed643d33df07e2a4fa643a
-
Size
27KB
-
MD5
020c7fdbe3ed643d33df07e2a4fa643a
-
SHA1
18b133c373d1c4e1a634751257ee56d00e61203d
-
SHA256
791076b4dfb1e583e633cd50d42ae166c9733612d0c4e8ca31819905b1a637b9
-
SHA512
522289085164a00d2c9f78827dcd227e66c9d0ca2fc0a8d9f1a0ce1e52203f99f39063ee3f944fd3ff65b1e4bbe3227f2e08311faed01c60a42280aab078cdc5
-
SSDEEP
768:+qkbC4hXzLJP0JQReruH6q6JWlGbrT6dqQ8kEKY:+qIC4RzNP0eRKuH67cGbrT6QaEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 020c7fdbe3ed643d33df07e2a4fa643a
Files
-
020c7fdbe3ed643d33df07e2a4fa643a.exe windows:5 windows x86 arch:x86
b71513332d48be0e343cb7cee569d816
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
FindResourceA
GetCommandLineA
MultiByteToWideChar
GetCommandLineW
LocalAlloc
GetACP
GetModuleHandleW
FormatMessageW
GetCurrentProcess
VirtualFree
VirtualFree
LocalFree
GetACP
GetACP
VirtualFree
GetModuleHandleA
GetACP
GetModuleHandleA
LocalFree
GetProcessHeap
WaitForSingleObject
LocalFree
MultiByteToWideChar
GetCommandLineW
VirtualFree
ntdll
NtAllocateVirtualMemory
user32
GetMessageW
PostMessageW
GetSysColor
GetDlgCtrlID
GetSysColor
DialogBoxParamW
LoadAcceleratorsW
GetSystemMenu
MoveWindow
SendDlgItemMessageW
DialogBoxParamW
GetSysColor
SendDlgItemMessageW
DialogBoxParamW
CheckDlgButton
GetMenu
IsDlgButtonChecked
GetMessageW
CheckDlgButton
KillTimer
SendDlgItemMessageW
LoadImageW
LoadAcceleratorsW
DialogBoxParamW
MoveWindow
GetSysColor
IsDlgButtonChecked
GetSysColor
EnableMenuItem
KillTimer
GetSystemMetrics
EndPaint
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ