Static task
static1
Behavioral task
behavioral1
Sample
0389eae560cc3f0846a81c5388196405.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0389eae560cc3f0846a81c5388196405.exe
Resource
win10v2004-20231215-en
General
-
Target
0389eae560cc3f0846a81c5388196405
-
Size
1.5MB
-
MD5
0389eae560cc3f0846a81c5388196405
-
SHA1
e6234876a575e9bad2499d4be9359940ba946589
-
SHA256
4941f3aff44fa06aa842c69ab22d90a17db1c6b84dc8f86827cd56b053c3b00e
-
SHA512
e745c5105d5d6c31a4307bba5d06cbf0c5748a42a208cc297667e59e17640b2a3d2e9593cc3c411b4cffb41a503c5fdda3d34923abb9933f96c0a81ff88d1414
-
SSDEEP
24576:IU60tla1iGXawiFRgSGWyH31Vz/XRYwR0WUIZx1epT+FBgsAzZ1UQVY:IUttla1xiFRgSREHR9epiF74us
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0389eae560cc3f0846a81c5388196405
Files
-
0389eae560cc3f0846a81c5388196405.exe windows:5 windows x86 arch:x86
8ad7fd218f1c0545c34bd69b90b773d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dbghelp
MakeSureDirectoryPathExists
psapi
GetModuleFileNameExA
user32
DrawFrameControl
gdi32
GetLayout
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegEnumValueA
shell32
SHAppBarMessage
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
ole32
OleFlushClipboard
oleaut32
SysFreeString
oledlg
ord8
gdiplus
GdipDrawImageRectI
netapi32
Netbios
oleacc
AccessibleObjectFromWindow
wininet
InternetWriteFile
imm32
ImmGetContext
Sections
.text Size: 1.5MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE