Static task
static1
Behavioral task
behavioral1
Sample
0c575902b884e914e7e36fcae989bfde.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c575902b884e914e7e36fcae989bfde.exe
Resource
win10v2004-20231215-en
General
-
Target
0c575902b884e914e7e36fcae989bfde
-
Size
156KB
-
MD5
0c575902b884e914e7e36fcae989bfde
-
SHA1
e0441601bb8dbb48bdd4cc0c123ed2a5073b2445
-
SHA256
e20565844525eb87618ff05047339a2f4b8c4f5df4e544709da85d996bee37bc
-
SHA512
a2b1002447b89de6b789fdd275924b9f6890108de79df42cca0327a56a523f0fbbf7b9064331b5c9ab267d14e89a2d5528039cc0475253c6eea63cdea716e2b3
-
SSDEEP
3072:UfWtcjNULF5L1PBzQCZys7BDipPSfazCwrbjGuWQGOxv:QtjqLF5L1fZys7BDwPCcGu0Ot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c575902b884e914e7e36fcae989bfde
Files
-
0c575902b884e914e7e36fcae989bfde.exe windows:4 windows x86 arch:x86
118532e8fdf962ac535d8a7ef39497a5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
CharUpperW
GetDC
DispatchMessageW
TranslateMessage
SendMessageA
SetTimer
PostThreadMessageW
wsprintfW
CharNextW
GetMessageW
KillTimer
UnregisterClassA
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoRevokeClassObject
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoRegisterClassObject
StringFromCLSID
kernel32
GlobalAlloc
lstrcpyA
OutputDebugStringW
InitializeCriticalSection
GetTickCount
GetLastError
GetProcessAffinityMask
LockResource
lstrcmpiW
lstrcpyW
EnumResourceNamesW
MultiByteToWideChar
GlobalFree
GetCPInfo
lstrcpyA
GetACP
lstrlenW
FreeEnvironmentStringsW
WideCharToMultiByte
FindClose
GetModuleHandleW
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ