Static task
static1
Behavioral task
behavioral1
Sample
12b65209433d6e8dda3781388bb0dcfd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12b65209433d6e8dda3781388bb0dcfd.exe
Resource
win10v2004-20231215-en
General
-
Target
12b65209433d6e8dda3781388bb0dcfd
-
Size
212KB
-
MD5
12b65209433d6e8dda3781388bb0dcfd
-
SHA1
a5db92078af8cda3498b6337aac6fad81dc82230
-
SHA256
bdcbe963624e44b426519a9e7457ec717628434d68b45e04735900811aa33f19
-
SHA512
31c1390e9338fb816f1d0ce1f0fccb23d0c7cc29793da838b2d33dbd6c748dc07ba6967bf66bae11371ec0aa5fdee30726085e3c6b7769a617cd7e43f1512ab2
-
SSDEEP
3072:2tu2t2SUiIp4ExErfQPAlzv0ZFrZZtC9pkTQmuCr3Sue5n5y:r2cLi8JCoPmzv4ZtYEBriu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b65209433d6e8dda3781388bb0dcfd
Files
-
12b65209433d6e8dda3781388bb0dcfd.exe windows:4 windows x86 arch:x86
2686a883c094d93b745465c7a7b1b3fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
IsBadReadPtr
GetVersionExA
lstrlenW
GetModuleHandleA
GetLastError
VirtualAlloc
lstrlenA
GetProcAddress
LocalAlloc
LoadLibraryExA
GetCommandLineA
user32
CharToOemA
GetMenuState
SetClipboardData
GetWindowTextA
DrawFrameControl
CreateIcon
GetMenuItemInfoA
EnumChildWindows
IsZoomed
GetWindowRect
CharLowerA
TrackPopupMenu
GetSubMenu
CheckMenuItem
DrawMenuBar
SetCursor
SetPropA
DrawIconEx
GetActiveWindow
InsertMenuItemA
SetParent
FillRect
GetKeyboardLayoutNameA
LoadCursorA
MapVirtualKeyA
GetForegroundWindow
DestroyCursor
GetKeyboardLayoutList
RegisterClipboardFormatA
GetMenuItemCount
MapWindowPoints
GetClassInfoA
SetScrollInfo
ShowWindow
GetFocus
SetScrollPos
IsWindowVisible
DestroyIcon
InflateRect
IsRectEmpty
GetDCEx
GetCapture
GetSysColorBrush
ShowOwnedPopups
ReleaseCapture
CharLowerBuffA
MoveWindow
SetWindowsHookExA
SetWindowLongW
MsgWaitForMultipleObjects
GetDlgItem
DispatchMessageW
GetWindow
CreateMenu
GetWindowPlacement
ReleaseDC
ScreenToClient
CloseClipboard
GetKeyState
GetScrollRange
DrawTextA
GetLastActivePopup
DrawEdge
LoadStringA
OemToCharA
GetParent
IsWindow
GetSysColor
GetCursor
CreatePopupMenu
RemovePropA
GetMenuStringA
IsChild
DeleteMenu
DispatchMessageA
EndPaint
EmptyClipboard
GetClassLongA
SetWindowPlacement
PostMessageA
DrawAnimatedRects
GetClipboardData
MessageBoxA
comdlg32
GetSaveFileNameA
ChooseColorA
gdi32
CreatePalette
CreateBitmap
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 512B - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 2KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ