Static task
static1
Behavioral task
behavioral1
Sample
03525dc2051819452d9f0a00c2f32dc5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03525dc2051819452d9f0a00c2f32dc5.exe
Resource
win10v2004-20231215-en
General
-
Target
03525dc2051819452d9f0a00c2f32dc5
-
Size
240KB
-
MD5
03525dc2051819452d9f0a00c2f32dc5
-
SHA1
64aa7a6049e54fcfaa5589ad0d5033e2d3a2bf48
-
SHA256
eb069e7d2e0d9c10d35d45ab1d97b9b4f89fd992059f3f3ee95aaa251ca063a6
-
SHA512
1f20e247954bd68271e02a31816a7e64617c6a90042168c0f3f38bc6a3f43637d208a661303ba481fe9478eb980e65fc56764cf828c6b10087a927dae6d61756
-
SSDEEP
6144:yFoCBa1z9WuhUmBKCkCdKvuE/qCR/J9ekXA:E1eFh/BKCkqKJ/qC/AkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03525dc2051819452d9f0a00c2f32dc5
Files
-
03525dc2051819452d9f0a00c2f32dc5.exe windows:4 windows x86 arch:x86
44b934530385d9305b503d1d7fa77ab0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelDeviceWakeupRequest
AreFileApisANSI
GetProcessTimes
_lwrite
GetModuleFileNameW
BuildCommDCBW
GetSystemTimeAsFileTime
RequestWakeupLatency
user32
GetPropA
LoadIconA
IsDialogMessageW
PostMessageA
InflateRect
gdi32
SelectClipPath
SelectPalette
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 534B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE