Static task
static1
Behavioral task
behavioral1
Sample
1eb997fb2343366a718ec0b6d759f3dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eb997fb2343366a718ec0b6d759f3dd.exe
Resource
win10v2004-20231222-en
General
-
Target
1eb997fb2343366a718ec0b6d759f3dd
-
Size
36KB
-
MD5
1eb997fb2343366a718ec0b6d759f3dd
-
SHA1
faa3cacb14a23a0ee58a97c28f2d7bba77ea5645
-
SHA256
76fc9416035eccd77ed0437e808a1c0b54e9e9156a0b6cdf5d59c4c65ddb4979
-
SHA512
5a3489dcc1ac23a48df0002a89eeb90a66de5d4db1492fbe8b48d60e8d25fddf5bedca165396437baee9412d4094ac3c7d24dacc058081899f8a0c0d91574d0a
-
SSDEEP
384:gqj6VVmMZSDwJXZxQ+C8uoeznJpxs1Yu5qTbGhlHEJP/nWul+9ncqPNzCQLrk8Yk:gW6VVmMkDwBQl8mzLJ6qTbLFRAZN5LXP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb997fb2343366a718ec0b6d759f3dd
Files
-
1eb997fb2343366a718ec0b6d759f3dd.exe windows:4 windows x86 arch:x86
01b16eaf44f4dcb4437b5cd6653cee06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
IsWindow
GetMenu
CopyRect
GetCursor
InsertMenuA
CopyIcon
EndDialog
LoadCursorA
DialogBoxParamA
LoadMenuA
GetWindowTextLengthA
CreateIcon
CloseWindow
DialogBoxParamW
DrawTextA
DrawIcon
GetWindowTextA
DrawTextW
DrawIconEx
CopyImage
GetFocus
kernel32
CreateFileA
SetFilePointer
WriteFile
lstrcpyA
lstrcatA
GetStringTypeA
GetStartupInfoA
TerminateProcess
GetCommandLineA
GetCPInfo
GetStringTypeW
GetStdHandle
GetOEMCP
GetCurrentProcess
GetFileType
GetModuleFileNameA
GetVersion
lstrcpynA
LCMapStringW
GetACP
MultiByteToWideChar
SetHandleCount
comctl32
CreateToolbar
ImageList_GetIcon
InitCommonControls
ImageList_Add
ImageList_Create
ImageList_Copy
CreateMappedBitmap
DllGetVersion
CreateStatusWindow
CreateToolbarEx
DrawStatusText
CreateStatusWindowW
advapi32
RegEnumKeyExA
RegDeleteValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueA
RegEnumValueA
RegEnumKeyExW
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegCreateKeyW
RegOpenKeyExW
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 16.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ