Static task
static1
Behavioral task
behavioral1
Sample
23a7171756b42bd74eeea83616895658.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23a7171756b42bd74eeea83616895658.exe
Resource
win10v2004-20231222-en
General
-
Target
23a7171756b42bd74eeea83616895658
-
Size
293KB
-
MD5
23a7171756b42bd74eeea83616895658
-
SHA1
4b205cf6c807a2998e3aa8df98358ea9c5208d36
-
SHA256
3d5a1cc99ab4c802c31ae20096d5de6e1f6fcb6942ea8a70792f303a0ad24199
-
SHA512
5aea06f9edffcae6b2e43995ac9a25d08491825c59d32786d0db4be20b6d23b7cc0eb0f3511622523408386fdeaf5e9b8084fe3b36af9c38690f27d1a72756d0
-
SSDEEP
6144:tkZkUU3ILhOLktN5UiVPp1nfhiO2FM9MisjqLBt6FwLaeys1D9:tkZJhyCN5U8nZD2FM9y+jZaeJJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23a7171756b42bd74eeea83616895658
Files
-
23a7171756b42bd74eeea83616895658.exe windows:4 windows x86 arch:x86
ff8fc2527bcbf9a40bed380b9cbe607e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
IsWindowUnicode
GetLastActivePopup
GetWindowTextA
BringWindowToTop
ShowWindow
MessageBoxExA
GetSysColor
GetTopWindow
CascadeWindows
ShowOwnedPopups
ole32
OleCreateFromData
WriteFmtUserTypeStg
OleGetClipboard
CoInstall
CoRegisterMallocSpy
StringFromIID
CoDosDateTimeToFileTime
OleQueryCreateFromData
CoFileTimeNow
PropVariantCopy
MkParseDisplayName
CoGetStdMarshalEx
kernel32
GetUserDefaultLangID
GetModuleHandleA
GlobalHandle
OpenMutexA
VirtualAlloc
SuspendThread
ResetEvent
ResumeThread
GlobalReAlloc
PulseEvent
GetExitCodeThread
GlobalFree
SetEvent
GlobalLock
GetProcAddress
GetUserDefaultLCID
HeapValidate
LocalLock
GetStartupInfoA
GetThreadLocale
VirtualProtect
CreateMutexA
IsBadWritePtr
ReleaseMutex
GetSystemDefaultLangID
GetStringTypeW
InitializeCriticalSection
GlobalAlloc
GetACP
IsBadStringPtrA
msvcrt
__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
_XcptFilter
_exit
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ