Static task
static1
Behavioral task
behavioral1
Sample
032d9e1c3284ddd1769ea5f40eeff187.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
032d9e1c3284ddd1769ea5f40eeff187.exe
Resource
win10v2004-20231215-en
General
-
Target
032d9e1c3284ddd1769ea5f40eeff187
-
Size
114KB
-
MD5
032d9e1c3284ddd1769ea5f40eeff187
-
SHA1
8ed75d15d77e7be3ab43112160fdc4f41fabae25
-
SHA256
3e18546b9b4b64a9ff539a10c760719f2cd91f70fa3e27cee613e3d229162f3a
-
SHA512
a00b532319bdd98135c1d28aade2ec25ff12332ce7442afa9230d3bb59371797baf0d8f19bdaee30c1ed252e224bf5230b01a1f0b91b1d6ff12f3815c4428197
-
SSDEEP
3072:U7HI1EhwtqRbL2ws+krtztcH15KOPuqmVFk4:U7HI1E2ybi9r8XKBqsFk4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 032d9e1c3284ddd1769ea5f40eeff187
Files
-
032d9e1c3284ddd1769ea5f40eeff187.exe windows:4 windows x86 arch:x86
13e805eaf04b241dc6563d480404e1a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LoadLibraryExW
lstrlenA
CreateFileW
GetCurrentThreadId
FindResourceW
PulseEvent
HeapCreate
GlobalUnlock
GetCurrentDirectoryA
LocalFree
SetLastError
Sleep
FindClose
GetModuleHandleA
CreateProcessA
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetComputerNameA
user32
FillRect
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
CreateWindowExA
CreateIcon
DrawEdge
GetCaretPos
IsWindow
DrawMenuBar
GetDC
SetFocus
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sepjtcn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE