Static task
static1
Behavioral task
behavioral1
Sample
10a6b19e4315f3329509bf58e53b7330.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10a6b19e4315f3329509bf58e53b7330.exe
Resource
win10v2004-20231215-en
General
-
Target
10a6b19e4315f3329509bf58e53b7330
-
Size
246KB
-
MD5
10a6b19e4315f3329509bf58e53b7330
-
SHA1
344c07d2699d8438506aa07160f99652618d82d5
-
SHA256
7917e47cea314e06e5a940fc8e7d6e3a4aba168b4ab2e3f87fa91fc1b383e559
-
SHA512
2068f5914f83d90b482ffd5cc79f22162e0e1895bf178308d1f1a93a4ae6bf30105199ac1517039e0af8b5354158150aaa4654454d663fea064fa5df1f8416b2
-
SSDEEP
6144:dbdLYLQP0oQFtqR6OQxon70QU3sNEWVCV:RdcLQPtQ7qR6Pxo70rs7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10a6b19e4315f3329509bf58e53b7330
Files
-
10a6b19e4315f3329509bf58e53b7330.exe windows:4 windows x86 arch:x86
c2145bb1cd92103fcc520b9de648a087
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
SetBkColor
GetPaletteEntries
SetBkMode
SetTextColor
BitBlt
CreateCompatibleDC
GetObjectA
CopyEnhMetaFileA
comdlg32
FindTextA
ChooseColorA
oleaut32
SysFreeString
SafeArrayUnaccessData
VariantCopyInd
OleLoadPicture
VariantChangeType
SafeArrayCreate
GetErrorInfo
SafeArrayGetUBound
SysAllocStringLen
SysReAllocStringLen
shell32
DragQueryFileA
kernel32
HeapFree
ResetEvent
LocalAlloc
GetFileAttributesA
GetEnvironmentStrings
VirtualAlloc
SizeofResource
GlobalAddAtomA
WaitForSingleObject
LoadLibraryExA
SetEndOfFile
GetFullPathNameA
GetOEMCP
SetEvent
GetFileType
WriteFile
LoadLibraryA
GetStartupInfoA
lstrcpyA
ExitThread
GetStringTypeA
GetProcAddress
ExitProcess
ReadFile
GetCommandLineW
GetLocalTime
GetStringTypeW
VirtualFree
GetUserDefaultLCID
GetCommandLineA
GetDateFormatA
WideCharToMultiByte
GlobalFindAtomA
GetModuleFileNameA
IsBadHugeReadPtr
GlobalAlloc
lstrlenA
GetLastError
GetFileSize
GetCurrentProcessId
GetStdHandle
GetVersionExA
IsBadReadPtr
GetModuleHandleA
ole32
OleRun
CoGetObjectContext
CoRegisterClassObject
GetHGlobalFromStream
CreateBindCtx
CoTaskMemFree
msvcrt
_acmdln
strlen
sin
log10
user32
GetCursor
DestroyCursor
GetFocus
EnableWindow
CharLowerBuffA
EnumWindows
CharNextA
DrawIconEx
CheckMenuItem
EnableMenuItem
EnumThreadWindows
CallNextHookEx
GetCapture
GetDC
GetDesktopWindow
FrameRect
DrawEdge
CreateMenu
CreateIcon
DispatchMessageW
EmptyClipboard
EndPaint
CallWindowProcA
ChildWindowFromPoint
FindWindowA
DefMDIChildProcA
GetClassInfoA
DispatchMessageA
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES04 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES87 Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES44 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES00 Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES75 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES45 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES15 Size: 1024B - Virtual size: 771B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES92 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ