Static task
static1
Behavioral task
behavioral1
Sample
12d410f7ae90cd94b823f2e050175545.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12d410f7ae90cd94b823f2e050175545.exe
Resource
win10v2004-20231215-en
General
-
Target
12d410f7ae90cd94b823f2e050175545
-
Size
167KB
-
MD5
12d410f7ae90cd94b823f2e050175545
-
SHA1
d05e12282814d0f471d998ce3ec8c952db906eec
-
SHA256
f0a3e9d9cec45f95b199598958a4fda5eabf407996022872c8fd3c0c56d6352f
-
SHA512
1ba946020e120e8c05a92c4904162051d963e2633cdb54d277601cd4ededbba7922762e225dac7c88abe7098ad68cdb291d452fb0a9ebbc252f8da20cbadaa3d
-
SSDEEP
3072:xAeg6g1uFqKERS18ZiDKNjGUQziKMvOHoXJWEVTihE1jVRRd:xABIGlSUQmKMdXSEl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12d410f7ae90cd94b823f2e050175545
Files
-
12d410f7ae90cd94b823f2e050175545.exe windows:5 windows x86 arch:x86
867c52bf25ce17f71079406de6cf8573
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
SetStretchBltMode
CreateSolidBrush
LineTo
SetTextAlign
SetTextColor
GetPixel
SelectPalette
GetObjectA
GetDeviceCaps
GetStockObject
RestoreDC
CreateCompatibleDC
RectVisible
GetTextMetricsA
PatBlt
CreatePalette
CreatePen
SetMapMode
CreateFontIndirectA
DeleteDC
GetClipBox
SelectObject
SaveDC
kernel32
GetModuleHandleA
lstrlenW
GetConsoleOutputCP
GetProcessHeap
lstrcmpiA
RemoveDirectoryA
lstrcmpiW
GlobalFindAtomA
GetCurrentProcessId
GetUserDefaultLangID
GetModuleHandleW
GetCurrentProcess
GetCommandLineA
GetCurrentThread
GetStartupInfoA
GetDriveTypeA
GetCurrentThreadId
IsDebuggerPresent
GetThreadLocale
lstrcmpA
lstrlenA
SetCurrentDirectoryA
GlobalFindAtomW
CopyFileA
GetWindowsDirectoryA
DeleteFileW
GetTickCount
MulDiv
GetACP
QueryPerformanceCounter
DeleteFileA
GetCommandLineW
GetOEMCP
VirtualAlloc
VirtualFree
GetVersion
user32
GetDC
CharNextA
GetParent
GetDesktopWindow
GetSystemMetrics
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Sjrvlmdr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Qrxnk. R Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ