Static task
static1
Behavioral task
behavioral1
Sample
04e736d79911e4e1e7060f83e02324fd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04e736d79911e4e1e7060f83e02324fd.exe
Resource
win10v2004-20231215-en
General
-
Target
04e736d79911e4e1e7060f83e02324fd
-
Size
79KB
-
MD5
04e736d79911e4e1e7060f83e02324fd
-
SHA1
ec25fc7e70b41b7e51bceaaa64aec0076c03d6b8
-
SHA256
8a7991ea19b63b275ec00b7409c9c16f329831cc9ed1c43d5018b292e235fbdd
-
SHA512
aa637621b40c3472aa71ccdc5d4a6ff0c3d4fe8da8b0c511f33570f7247263d5e8b2a4d865634c7171ab704feefe57f00638068814462dc742649b327255b98c
-
SSDEEP
1536:kPkOFxitgmjyNH0n6HroxNtfwjA9HHQSzRtX4kkLtkkLsFMJ:kPkOFm+N0noqYc9Hw8fokkLtkkLseJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e736d79911e4e1e7060f83e02324fd
Files
-
04e736d79911e4e1e7060f83e02324fd.exe windows:5 windows x86 arch:x86
f988d3492d9e86c3a347ce7967a5b04c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExA
OpenFileMappingA
ReadFile
GetFileTime
lstrcmpA
GetFileType
FlushFileBuffers
HeapAlloc
GetLastError
lstrcatA
HeapFree
GlobalFree
GetStdHandle
DeleteFileA
GetLocalTime
GetCPInfo
OpenFile
FormatMessageA
CompareStringA
GetFileTime
GetCPInfo
FindClose
FlushFileBuffers
ReadFile
GetLocalTime
DeleteFileW
FreeResource
OpenFileMappingA
CompareStringA
FormatMessageA
HeapFree
OpenFile
lstrlenA
GetStdHandle
GetCPInfo
OpenFileMappingA
HeapFree
CompareStringA
GetPriorityClass
CopyFileA
WriteFile
GlobalFree
ExitProcess
lstrlenA
CopyFileExA
FlushFileBuffers
FindClose
HeapAlloc
GetLocalTime
GetFileType
ReadFile
GetFileTime
GetStdHandle
FormatMessageA
GetCommandLineA
lstrcatA
WriteFile
CopyFileA
lstrcmpA
FormatMessageA
GetCPInfo
GetStdHandle
OpenFileMappingA
GetFileType
CreateDirectoryA
GlobalFree
FlushFileBuffers
HeapFree
OpenFile
ExitProcess
FindClose
GetPriorityClass
CopyFileExA
HeapAlloc
DeleteFileA
lstrlenA
GetFileType
GetLocalTime
OpenFile
OpenFileMappingA
ExitProcess
DeleteFileW
GetCPInfo
GetPriorityClass
lstrcmpA
FindClose
FormatMessageA
ReadFile
GetFileTime
lstrcatA
HeapFree
GetCommandLineA
FlushFileBuffers
CopyFileExA
OpenFileMappingA
GetFileType
CreateDirectoryA
GetPriorityClass
WriteFile
CopyFileA
lstrcmpA
HeapFree
ReadFile
GetCommandLineA
lstrcatA
FindClose
ExitProcess
FormatMessageA
ExitThread
DeleteFileW
GetFileTime
CopyFileExA
CopyFileA
CompareStringA
lstrlenA
GetCommandLineA
DeleteFileW
FormatMessageA
GlobalFree
ExitThread
HeapAlloc
CopyFileExA
GetLastError
GetPriorityClass
FindClose
GetLocalTime
CreateDirectoryA
OpenFile
lstrcmpA
WriteFile
OpenFileMappingA
CompareStringA
ExitProcess
HeapFree
FormatMessageA
GetLastError
ExitThread
FreeResource
lstrcmpA
GetFileTime
GetPriorityClass
GetCommandLineA
CopyFileA
GetStdHandle
CreateDirectoryA
GetCPInfo
FindClose
GetFileType
DeleteFileW
WriteFile
HeapFree
FormatMessageA
GetFileTime
GlobalFree
CopyFileExA
GetFileType
FlushFileBuffers
ExitProcess
lstrlenA
FindClose
GetCPInfo
GetStdHandle
DeleteFileA
CopyFileA
user32
GetScrollInfo
BeginPaint
IsWindow
DrawTextA
GetMenu
AlignRects
DrawIconEx
GetFocus
InsertMenuA
DialogBoxParamA
CloseWindow
LoadMenuA
DrawIcon
DrawTextW
GetDlgItem
DialogBoxParamW
GetCursor
CreateIcon
GetWindowTextLengthA
IsMenu
CopyIcon
AppendMenuA
BeginPaint
LoadMenuA
EndDialog
AlignRects
GetDlgItem
CopyImage
InsertMenuA
AppendMenuW
IsWindow
DialogBoxParamA
AppendMenuA
CopyIcon
GetDC
GetWindowTextA
LoadCursorA
GetWindowTextLengthA
DrawTextW
IsMenu
CopyRect
CreateIcon
GetCursor
CopyIcon
GetMenu
DrawIconEx
DrawIcon
GetWindowTextLengthA
GetScrollPos
GetScrollInfo
LoadMenuA
DialogBoxParamW
CloseWindow
LoadCursorA
DrawTextA
GetDlgItem
CopyImage
InsertMenuA
BeginPaint
IsMenu
CopyIcon
GetDC
AppendMenuA
GetMenu
GetWindowTextLengthA
EndDialog
CloseWindow
GetCursor
DrawTextA
GetFocus
AlignRects
LoadCursorA
AppendMenuW
GetScrollInfo
CopyRect
DrawTextW
GetScrollPos
DialogBoxParamA
BeginPaint
CreateIcon
Sections
.d13c Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cgd7 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.119g Size: 41KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.611d Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.62hb Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ