Static task
static1
Behavioral task
behavioral1
Sample
0662c98ea5fde809ac6d61994e1a3451.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0662c98ea5fde809ac6d61994e1a3451.exe
Resource
win10v2004-20231215-en
General
-
Target
0662c98ea5fde809ac6d61994e1a3451
-
Size
89KB
-
MD5
0662c98ea5fde809ac6d61994e1a3451
-
SHA1
11471f9183f1b4de57a66bb47e231613de16da90
-
SHA256
6bad8ed360a449aee3f9b73a148f30040b19ad527d38d022609f3a85334d0d57
-
SHA512
d99a3ba04da346fa89ad94fababa2efd1cbb68e424c45218767ba856c000ed9a0f6350efd6a51bfc8e14c977f9449e27f6565b1dfa11a7c755370baadafd5ac5
-
SSDEEP
768:2yVLn278f+Rd4BDMVAaAF8tXID8wx8z+xSSJqM+fHfB68c8giIUq0YM7X:pDNhFSYfsUnof/s8X3q0d7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0662c98ea5fde809ac6d61994e1a3451
Files
-
0662c98ea5fde809ac6d61994e1a3451.exe windows:4 windows x86 arch:x86
0cdb0de50cba9afaabde63ca775f8abf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
DeleteCriticalSection
CreateThread
ExitProcess
SetEvent
HeapDestroy
GetLastError
GetDiskFreeSpaceA
GetModuleHandleA
TlsGetValue
VirtualProtect
GetConsoleFontSize
ReleaseMutex
SearchPathA
CloseHandle
GetTickCount
lstrlenA
Sleep
AddAtomA
FindResourceExA
user32
CreateMenu
GetKeyState
DialogBoxParamA
CreateWindowExA
CloseWindow
DragDetect
CopyIcon
DispatchMessageA
GetMessageA
GetScrollBarInfo
CopyImage
EndDialog
EnableWindow
IsIconic
wshbth
WSHNotify
WSHOpenSocket2
WSHJoinLeaf
WSHIoctl
NSPStartup
shell32
FreeIconList
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyewjma Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE