Static task
static1
Behavioral task
behavioral1
Sample
219f440fde12707f5ace85fafc05fc8d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
219f440fde12707f5ace85fafc05fc8d.exe
Resource
win10v2004-20231215-en
General
-
Target
219f440fde12707f5ace85fafc05fc8d
-
Size
637KB
-
MD5
219f440fde12707f5ace85fafc05fc8d
-
SHA1
510e5bbc6c4aeb257644913a6fe921650433b31c
-
SHA256
e98f4a049eb2f1e066f07a520c8184ff5f8a6773beecdec9d931704cfbfe129d
-
SHA512
551b7a61a219cee28655572af073b8092cac22cfeaf572deff0bb5998ad0b98752975f0026167da7a40e284361811a65464215f7a81946fc40932fbc31b31f16
-
SSDEEP
12288:UmyWFNcU2j2IK66uxQf0XCFo20551DfE2RRU/pGV44Vg69MwbO+kPzd1lHYi0myS:XFNcrj2INQf0XCypfE2fUkg6vbKd3Y+7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219f440fde12707f5ace85fafc05fc8d
Files
-
219f440fde12707f5ace85fafc05fc8d.exe windows:4 windows x86 arch:x86
a0774257c4b2fd31a7d20eac93aeb8f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetConsoleCP
SetConsoleCP
LoadLibraryExA
CloseHandle
HeapReAlloc
SuspendThread
GlobalUnlock
CompareFileTime
WaitForMultipleObjects
GetVersion
GetStdHandle
GetAtomNameA
GetSystemDefaultLangID
VirtualProtect
GetTickCount
WaitForSingleObject
GetCommandLineA
GetModuleHandleA
InterlockedExchange
HeapCreate
user32
DragObject
DialogBoxParamA
InsertMenuA
SetScrollInfo
GetCursorInfo
CreateMenu
InvertRect
GetKeyboardLayout
GetDlgItem
IsDialogMessage
DestroyMenu
FillRect
DrawCaption
CopyImage
CreateIcon
SetPropA
FindWindowA
DispatchMessageA
EnableScrollBar
GetKeyState
SetWindowPos
advapi32
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ