Static task
static1
Behavioral task
behavioral1
Sample
1e75abd4cef9c98f34a34804e8bfd60b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e75abd4cef9c98f34a34804e8bfd60b.exe
Resource
win10v2004-20231215-en
General
-
Target
1e75abd4cef9c98f34a34804e8bfd60b
-
Size
65KB
-
MD5
1e75abd4cef9c98f34a34804e8bfd60b
-
SHA1
19bdc4d67538ba7e9bc0b5efb0e8c04534367de0
-
SHA256
8424e560673731c346af36ea33fd42fc7a63398b4d45e8e0cc930d96bf782ecc
-
SHA512
189710ffced081e79b2da24a3b6d74fca77afc24cb8a6806d3d9f1ece2c8c9572e1c7c66bcbefb31a3e26f6b35180ed43308cd01838628e961bc2d0e2cc249a1
-
SSDEEP
1536:bb1fZ9dJVSA9j4QbTNVC7M3HO3P5ifqrBDfQZ4k:v1RmO/bTNV7gP5if4dfsD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e75abd4cef9c98f34a34804e8bfd60b
Files
-
1e75abd4cef9c98f34a34804e8bfd60b.exe windows:5 windows x86 arch:x86
c6c031d6839cd7f5300af672a282ad5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursorPos
GetMenu
GetSystemMenu
GetWindowLongA
GetDlgItem
ChangeMenuA
GetWindowRect
GetClientRect
IntersectRect
GetWindowTextA
DestroyIcon
GetWindowDC
EnableMenuItem
IsDlgButtonChecked
MoveWindow
UnregisterClassW
GetFocus
CharUpperW
IsZoomed
SendMessageW
SystemParametersInfoW
CalcMenuBar
LoadCursorA
GetSubMenu
msvcrt
__initenv
__p__commode
towupper
fseek
wcstok
_vsnprintf
sscanf
??2@YAPAXI@Z
_wcsicmp
_wsplitpath
__p__fmode
__setusermatherr
__set_app_type
kernel32
GetFileSize
GetCommandLineA
TlsAlloc
ExitProcess
FreeEnvironmentStringsW
IsDBCSLeadByte
GetFileAttributesA
GetDriveTypeA
GetConsoleMode
OpenMutexW
LockResource
VirtualAlloc
GetWindowsDirectoryA
GetTickCount
GetTempPathA
SetLastError
OpenMutexA
IsBadReadPtr
GetCurrentProcessId
GetCurrentThreadId
ole32
MkParseDisplayName
CreateILockBytesOnHGlobal
CoTaskMemAlloc
GetRunningObjectTable
CoCreateGuid
CoGetInterfaceAndReleaseStream
StringFromGUID2
CoUninitialize
CoCreateInstanceEx
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 29KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1005B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ