Static task
static1
Behavioral task
behavioral1
Sample
2819d7a6ef6d0e87b75280be83b36e67.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2819d7a6ef6d0e87b75280be83b36e67.exe
Resource
win10v2004-20231215-en
General
-
Target
2819d7a6ef6d0e87b75280be83b36e67
-
Size
226KB
-
MD5
2819d7a6ef6d0e87b75280be83b36e67
-
SHA1
437c447547a83aa656d212f3daba07c0de490d27
-
SHA256
77f0a2cb1b720b778dec11d77aaaaf6343fd2e15bff2aa5880abb90de805ce29
-
SHA512
e3a8edbac4c1de6fafd3da6560d37466110bdde345f870edc20f8d66c07d34c0bb9af3738a1d16a93b0c57f790f5b3c3cac235fe5ce776febbe0629a4a090244
-
SSDEEP
6144:C1jCm/ic5Ti+gIqujf3l0u65Ze0ntkEjRWX0A41B:Cpp/Y+g1ujf3d6Lntd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2819d7a6ef6d0e87b75280be83b36e67
Files
-
2819d7a6ef6d0e87b75280be83b36e67.exe windows:4 windows x86 arch:x86
c8e1eb1221d8cbe68166610aa5018a6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
PeekMessageW
PostMessageA
LoadStringA
OffsetRect
RegisterClassA
ReleaseCapture
RedrawWindow
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
GetCurrentPositionEx
SelectPalette
shell32
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHFileOperationA
SHGetFolderPathA
DragQueryFileA
kernel32
GetCommandLineA
LoadLibraryA
GetModuleHandleA
lstrlenA
VirtualAllocEx
ExitProcess
ExitThread
GetLastError
LoadLibraryExA
GetVersionExA
GetProcAddress
IsBadHugeReadPtr
Sections
CODE Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC2 Size: 1024B - Virtual size: 553B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC6 Size: 512B - Virtual size: 453B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC3 Size: 1024B - Virtual size: 957B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ