Static task
static1
Behavioral task
behavioral1
Sample
00e782ec1a728eaf3978ddbae04dd3ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00e782ec1a728eaf3978ddbae04dd3ff.exe
Resource
win10v2004-20231215-en
General
-
Target
00e782ec1a728eaf3978ddbae04dd3ff
-
Size
205KB
-
MD5
00e782ec1a728eaf3978ddbae04dd3ff
-
SHA1
92be8826aa5a3b3fef2d8a153db76d55179417a1
-
SHA256
e9829c2bcd5b1f6d948c245ec33d977af82fedb26bad387c231a58801119e8c3
-
SHA512
0c14577b6d914d987bda2771c6d8aca57230a512733223f4955551424ae7cec32374c1cc3017d65ff177d8265239aa98ec8018c3560b7aa4c16135ed165ba27b
-
SSDEEP
3072:1X724bRp2HFLsJ+eoj/lpDIr0Yku12TZFwffeKxwMtK:FbvaE0LDu0212wFM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e782ec1a728eaf3978ddbae04dd3ff
Files
-
00e782ec1a728eaf3978ddbae04dd3ff.exe windows:4 windows x86 arch:x86
ade117ad49ada4696030341a9588ba67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
WritePrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpiA
lstrcmpA
SetLastError
GetCurrentThreadId
GetLastError
CreateFileMappingA
lstrcpynA
HeapFree
HeapAlloc
GetProcessHeap
OpenProcess
GetCurrentProcessId
GetModuleHandleA
WriteFile
SetFilePointer
ExpandEnvironmentStringsA
GetVersionExA
SetErrorMode
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
FreeLibrary
TerminateProcess
TlsAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
ExitThread
TlsGetValue
TlsSetValue
CreateThread
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
EnterCriticalSection
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
ResumeThread
CreateEventA
Sleep
WaitForMultipleObjects
ResetEvent
OpenEventA
OpenFileMappingA
MapViewOfFile
SetEvent
CloseHandle
UnmapViewOfFile
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrlenA
UnhandledExceptionFilter
user32
EnumDesktopWindows
IsWindowVisible
SetWindowTextA
UpdateWindow
GetDesktopWindow
InvalidateRect
FindWindowA
OpenDesktopA
ReleaseDC
SetForegroundWindow
LoadMenuA
GetSubMenu
SetMenuDefaultItem
EnableMenuItem
DeleteMenu
GetCursorPos
EnableWindow
GetDC
PeekMessageA
TrackPopupMenu
DialogBoxParamA
CreateDialogParamA
MessageBoxA
PostQuitMessage
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadImageA
OpenInputDesktop
GetThreadDesktop
CloseDesktop
GetUserObjectInformationA
SetThreadDesktop
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClipboardFormatA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetForegroundWindow
ExitWindowsEx
GetWindowLongA
GetDlgItemTextA
DrawTextA
PostMessageA
DestroyWindow
IsWindowEnabled
DefWindowProcA
IsWindow
SendDlgItemMessageA
SendMessageA
CopyRect
GetSystemMetrics
SystemParametersInfoA
MoveWindow
SetWindowPos
MessageBeep
FlashWindow
BeginPaint
GetClientRect
GetDlgItem
GetWindowRect
ScreenToClient
DrawIcon
EndPaint
KillTimer
ShowWindow
LoadIconA
LoadStringA
wsprintfA
SetDlgItemTextA
SetTimer
EndDialog
SetWindowLongA
DestroyMenu
gdi32
DeleteObject
GetDeviceCaps
SelectObject
CreateSolidBrush
SetBkColor
SetBkMode
GetStockObject
SetTextColor
advapi32
RegOpenKeyExA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetUserNameA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
shell32
DragQueryFileA
Shell_NotifyIconA
ole32
RegisterDragDrop
CoInitialize
OleInitialize
RevokeDragDrop
wsock32
ioctlsocket
gethostbyname
connect
htons
shutdown
closesocket
socket
WSAGetLastError
setsockopt
WSACleanup
WSAStartup
recv
send
winmm
PlaySoundA
mpr
WNetGetUniversalNameA
WNetGetResourceInformationA
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE