Static task
static1
Behavioral task
behavioral1
Sample
18738bcd5d8a03e97cfccf9422c30ce4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18738bcd5d8a03e97cfccf9422c30ce4.exe
Resource
win10v2004-20231222-en
General
-
Target
18738bcd5d8a03e97cfccf9422c30ce4
-
Size
135KB
-
MD5
18738bcd5d8a03e97cfccf9422c30ce4
-
SHA1
0af59daa1582d108c864d8da6e3281cdc6e34958
-
SHA256
98c68bbc6241f34407ebf4b5779a21d21f86c5238305461e905e053eb87dc452
-
SHA512
e12836f9f62a2fa601b6375fa4c0f1f70c627aba11fa45d4e1e2d931bb3ea9790a1e9105905f5fbece5352fa17a2f95d2f0c7eed84a6b8dcdcf87dc2c4dba88e
-
SSDEEP
3072:TQV6xYMtfO4U0Zcrw6t4yt/FQTxiTDWbacWtGbQmk7t6:TQwcZ0Zj6WsFQT8WbacCG456
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18738bcd5d8a03e97cfccf9422c30ce4
Files
-
18738bcd5d8a03e97cfccf9422c30ce4.exe windows:4 windows x86 arch:x86
f55c5762cbae159ab1f4911e00fc50f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyImage
GetWindowTextLengthA
IsWindow
AppendMenuW
GetWindowTextA
DrawTextA
DrawIconEx
BlockInput
DrawIcon
GetDlgItem
GetDC
LoadCursorA
CalcMenuBar
AlignRects
CopyIcon
GetMenu
GetWindowTextA
GetDC
DrawIconEx
DialogBoxParamW
CopyImage
IsWindow
AppendMenuW
CopyIcon
DialogBoxParamA
LoadMenuA
GetCursor
GetMenu
BlockInput
DrawTextW
CopyRect
GetWindowTextLengthA
DrawIcon
AppendMenuA
CalcMenuBar
IsMenu
DrawTextA
kernel32
ExitProcess
GetFileType
ExitProcess
Sleep
ExitProcess
GetUserDefaultLangID
ExitProcess
GetOEMCP
ExitProcess
GetStringTypeA
ExitProcess
GetConsoleOutputCP
ExitProcess
GetModuleFileNameA
ExitProcess
lstrcmpiA
WideCharToMultiByte
GetConsoleOutputCP
GetFileSize
GetFileType
GetLocalTime
GetCurrentThread
lstrcpynA
GetModuleFileNameA
lstrcmpA
GetStringTypeA
lstrcatA
HeapAlloc
GetCurrentProcess
HeapFree
GetFileAttributesA
GetCurrentProcessId
GlobalFree
lstrcpyA
Sections
.taxt Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddta Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddaa Size: 1KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.redoc Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idaaa Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ