Static task
static1
Behavioral task
behavioral1
Sample
01003fa7d7c1ba1e37ed32a653b28435.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01003fa7d7c1ba1e37ed32a653b28435.exe
Resource
win10v2004-20231215-en
General
-
Target
01003fa7d7c1ba1e37ed32a653b28435
-
Size
176KB
-
MD5
01003fa7d7c1ba1e37ed32a653b28435
-
SHA1
17bd2c0aa72d51098903a9e100da93612ab8e9be
-
SHA256
dc0fdb7bfa0c3d4316d1e520d13f89aa9e2d6aaf074425973e3d4fbb9ecf302a
-
SHA512
5718408bddb035b4eceaa86e09de6d50ba75f0b60c23ec032d2427a7cc843f5fc2757bf5537530579f0c21e33f1fbfa6bec3c0215e87f3d998a5ffd95deb3c04
-
SSDEEP
3072:tbqF8kZqzj2DD3OYBcPyckwCB4fgvTCTCxa+SJA4ChMJFiu:t++djcD35LCT4qGgJF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01003fa7d7c1ba1e37ed32a653b28435
Files
-
01003fa7d7c1ba1e37ed32a653b28435.exe windows:4 windows x86 arch:x86
16048858c950ba49b5c3c2f42f12413a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandA
sndPlaySoundA
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
FillRect
GetWindowLongA
IsWindow
GetSysColor
SetWindowLongA
SetCursor
ReleaseCapture
GetDlgItem
GetWindowInfo
GetDC
MoveWindow
LoadCursorA
ReleaseDC
SetWindowPos
SetCapture
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
lstrlenA
WriteFile
RaiseException
GetStdHandle
GetACP
MultiByteToWideChar
GetCalendarInfoW
InterlockedCompareExchange
CloseHandle
GetEnvironmentVariableA
GetCurrentProcessId
GetLocaleInfoA
CreateFileW
GetProcessHeap
HeapDestroy
HeapReAlloc
LoadLibraryExW
WideCharToMultiByte
GetCurrentThreadId
LoadLibraryW
EnumResourceNamesA
GetStartupInfoA
Sleep
GetSystemTime
HeapAlloc
GetCurrentProcess
GetThreadLocale
CreateProcessA
FindFirstFileW
LocalAlloc
SystemTimeToFileTime
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
TerminateProcess
GetModuleHandleA
lstrlenW
HeapSize
InterlockedExchange
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
lstrcpynW
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ