Static task
static1
Behavioral task
behavioral1
Sample
274e637e7cabc08995e38842f62f2946.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
274e637e7cabc08995e38842f62f2946.exe
Resource
win10v2004-20231222-en
General
-
Target
274e637e7cabc08995e38842f62f2946
-
Size
55KB
-
MD5
274e637e7cabc08995e38842f62f2946
-
SHA1
5af7a3392d8b989cf03d99d1c2273dc260df4b08
-
SHA256
49e09139748d01fa36bffea8abfc1d46b083e08ec3dc6808957da5afcb2fb058
-
SHA512
4ac527e9901678f874599bb3e5523ab6f876b4719ca727ef1f906a02c5bb088b436e7e7f75ed05903377a07805d46a39d457191c2b1b42c4a5a5a93fc850a6bd
-
SSDEEP
1536:XZonYXMT5bzNyS0PuEH1eJ5QJ7RQsWUk4d2loAN5W/BMCfiS:CYXm9zNyS0PuMeJ5VUS6AN5yz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 274e637e7cabc08995e38842f62f2946
Files
-
274e637e7cabc08995e38842f62f2946.exe windows:4 windows x86 arch:x86
3b6a81e1f7be6b93851196ae80add716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindResourceA
CreateFileA
PulseEvent
FindClose
CreateMutexA
GetCurrentThreadId
GetModuleHandleA
HeapCreate
GlobalUnlock
TlsGetValue
SetConsoleCursorInfo
GetEnvironmentVariableA
GetACP
GlobalFree
LoadLibraryExW
SetLastError
ExitThread
ReleaseMutex
FindAtomA
user32
DefWindowProcW
CallWindowProcA
GetIconInfo
GetDlgItem
CheckRadioButton
IsWindow
FillRect
GetDC
CopyRect
DispatchMessageA
DrawMenuBar
GetFocus
DrawEdge
uxtheme
GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeEdge
DrawThemeText
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ