?GeometryTranslate@@YGHPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
001531dccf5d0762b2de9cfc79b7672c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
001531dccf5d0762b2de9cfc79b7672c.exe
Resource
win10v2004-20231215-en
General
-
Target
001531dccf5d0762b2de9cfc79b7672c
-
Size
54KB
-
MD5
001531dccf5d0762b2de9cfc79b7672c
-
SHA1
7e2c760695dcc59a0a57d55a25089154bd55a811
-
SHA256
52e90cd3377d1c20f529cce5a94a03c83a8d8196df6dd1ca062a76a16196b21f
-
SHA512
57a7be11309a7d3e682b38f93f6a9779cd1db5877a6e46573877a00a9f48a9f7505c9b9ec529bd9a28b644261fb677bc8bf64000702a2ec04a6a98c8d550792b
-
SSDEEP
1536:ZXlqeEo6JeaFRSfXBYO7ifRkB+HFECKGRv:ZXlqto6gy2XBYO5BkFESR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001531dccf5d0762b2de9cfc79b7672c
Files
-
001531dccf5d0762b2de9cfc79b7672c.exe windows:5 windows x86 arch:x86
68286e99e99c44b344fa7ef4fca34775
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrW
StrFormatByteSize64A
user32
HideCaret
LockWindowUpdate
GetKeyboardLayoutList
GetDCEx
wsprintfA
BeginDeferWindowPos
SystemParametersInfoA
kernel32
SetFileApisToOEM
ReleaseMutex
CreateNamedPipeW
HeapUnlock
GlobalCompact
gdi32
Polyline
GetTextExtentPointA
GetTextCharsetInfo
SetDIBColorTable
msvcrt
iswctype
calloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE