_PostQuitMessagePostQuitMessagePostQuitMessagePostQuitMessage@0
Static task
static1
Behavioral task
behavioral1
Sample
312daaa80183c67bae862cbb99ca9134.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
312daaa80183c67bae862cbb99ca9134.exe
Resource
win10v2004-20231222-en
General
-
Target
312daaa80183c67bae862cbb99ca9134
-
Size
179KB
-
MD5
312daaa80183c67bae862cbb99ca9134
-
SHA1
bc47121702b4fb1f73b9c1df661f66199b5ea84a
-
SHA256
23cc6ff8133b0222fda4c484cadc5c3e93649cf08b3decc8aadbf2b24a2759c5
-
SHA512
0815c4640471479844fef02ad6bc45a7a8aa206a98239d6d9127220919e3c6731abe785562fcfc1c2314128831c87f6774d1479bc3bf5c09201972392973e11e
-
SSDEEP
3072:f1DyHZ/R4CBRemuL3vOR35uOGMhXlMnXLsKFHlJztkW2SUOcN0kw7jr8wg6TCTiC:KpaCBReHLfO90O3nM7FHpkWjcNnw7jrq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 312daaa80183c67bae862cbb99ca9134
Files
-
312daaa80183c67bae862cbb99ca9134.exe windows:5 windows x86 arch:x86
f9adfb3ba9cabb18a9b3c665d46670cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleBuildVersion
shlwapi
PathFileExistsA
user32
HideCaret
GetDlgCtrlID
OpenIcon
GetSysColor
GetIconInfo
IsWindowEnabled
SetCursor
AppendMenuW
kernel32
CreateNamedPipeW
lstrlenA
EnterCriticalSection
DeleteAtom
LeaveCriticalSection
GetTimeFormatW
lstrcpynW
lstrlenW
msvcrt
exit
iswalpha
localtime
time
strcspn
strtol
Exports
Exports
Sections
.vgfdg Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cfvgg Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erre Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dfrer Size: 1024B - Virtual size: 574B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ