Static task
static1
Behavioral task
behavioral1
Sample
23f5a0afa5ee1d51ded127e1b1ed7072.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23f5a0afa5ee1d51ded127e1b1ed7072.exe
Resource
win10v2004-20231222-en
General
-
Target
23f5a0afa5ee1d51ded127e1b1ed7072
-
Size
165KB
-
MD5
23f5a0afa5ee1d51ded127e1b1ed7072
-
SHA1
7228bcf2a1ad1623d8d1010e532bf1c380901b58
-
SHA256
786f221f35b79ce41cbccdd846d14187efb6d836b4746d9784e8deb65ba30e1a
-
SHA512
48b2d0fd059b89bf8698149f57c5b4c7f7ede47e6cb6e8f896b4f7d814f61812ffdf258225cd05c11c3df62a5363e3038890dc60d5d2b9ee7a10d7cf2b69592b
-
SSDEEP
3072:v4jaCXDIkwlyiZGRdiub5FLqDKjIs38yFrXig9xXf5JZGzZBK9MQ6EgIMDSK:vsaMwlyIGauAsvFrXiczwzm9MQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23f5a0afa5ee1d51ded127e1b1ed7072
Files
-
23f5a0afa5ee1d51ded127e1b1ed7072.exe windows:4 windows x86 arch:x86
9e9433703b1504732819382631f90644
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
EnterCriticalSection
ExitProcess
GetCommandLineA
GetModuleHandleA
GetPrivateProfileStringA
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RemoveDirectoryA
RtlUnwind
SetCurrentDirectoryA
SetLastError
SetUnhandledExceptionFilter
SleepEx
UnmapViewOfFile
lstrcmpA
user32
CreateMDIWindowA
MessageBoxIndirectA
DialogBoxParamA
EnableWindow
EndPaint
MessageBoxA
OemToCharW
OemToCharA
CharToOemA
advapi32
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey
ole32
CoUninitialize
OleGetClipboard
OleFlushClipboard
CreateFileMoniker
CoTaskMemFree
CoInitialize
CoGetClassObject
CoCreateInstance
OleUninitialize
CLSIDFromProgID
OleInitialize
wininet
InternetOpenA
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetOptionExA
InternetGetLastResponseInfoA
InternetGetCookieA
InternetCrackUrlA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
ShellExecuteExW
SHBindToParent
Sections
.text Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ