Static task
static1
Behavioral task
behavioral1
Sample
146f07d77bd675d458ea790c01a816c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
146f07d77bd675d458ea790c01a816c2.exe
Resource
win10v2004-20231215-en
General
-
Target
146f07d77bd675d458ea790c01a816c2
-
Size
44KB
-
MD5
146f07d77bd675d458ea790c01a816c2
-
SHA1
8e6286614741412bc45f28de696b8efbfb17fd16
-
SHA256
8e79f2e3ffd655819f953b5e0895d499d4fb5ce3d0fe0494e665b3cb1472055e
-
SHA512
702419b9923f7242bf6866626ac3c96e965274f4ca6ca8dfecc6ff25b0839b308cce344bbab9052696998c1d6ee4a2d4697e72c7738859d30a94a275df43e3e2
-
SSDEEP
384:gpMWyv+zzM6KUnt9HJ63xcGGWGFdZ/xc4wnyW/6WcH7xoPxLLXMpMM9dTwc531F:qMR6fdK2xWGFJc4wboH7aPxLLcaMvJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146f07d77bd675d458ea790c01a816c2
Files
-
146f07d77bd675d458ea790c01a816c2.exe windows:4 windows x86 arch:x86
a614443e9c76b6ec51af3dd02d1bc05d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
CreateFileA
lstrcpyA
WinExec
lstrcmpA
GetModuleHandleA
ExitProcess
DeviceIoControl
user32
DefWindowProcA
TrackPopupMenu
ClientToScreen
CreatePopupMenu
CheckMenuItem
ChangeMenuA
SendMessageA
InvalidateRect
SetWindowPos
GetActiveWindow
DestroyMenu
GetSystemMenu
GetSystemMetrics
EndPaint
BeginPaint
PostQuitMessage
GetWindowRect
SetFocus
GetWindow
IsWindowVisible
GetWindowLongA
PostMessageA
GetDesktopWindow
CreateIconIndirect
SetForegroundWindow
LoadBitmapA
DestroyIcon
ModifyMenuA
ScreenToClient
GetCursorPos
FillRect
SystemParametersInfoA
GetDC
ReleaseDC
WinHelpA
LoadIconA
LoadCursorA
RegisterClassA
LoadStringA
CreateWindowExA
RegisterWindowMessageA
MessageBoxA
GetWindowTextA
GetSysColor
ShowWindow
UpdateWindow
SetTimer
TranslateMessage
DispatchMessageA
GetMessageA
KillTimer
gdi32
CreateSolidBrush
CreateBitmap
DeleteDC
BitBlt
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
SelectObject
SetTextColor
shell32
Shell_NotifyIconA
comctl32
ord17
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lmqa Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE