Static task
static1
Behavioral task
behavioral1
Sample
33a7c4ce715b6b5f1aac4f3698d7dd5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
33a7c4ce715b6b5f1aac4f3698d7dd5e.exe
Resource
win10v2004-20231215-en
General
-
Target
33a7c4ce715b6b5f1aac4f3698d7dd5e
-
Size
66KB
-
MD5
33a7c4ce715b6b5f1aac4f3698d7dd5e
-
SHA1
bba15b0210fbac4920c9864217cd7fbf998ff880
-
SHA256
73d3c5f30152e6990f9750aec89a56603a15ce7883bb590101ad50c561a67707
-
SHA512
d2244c4a7f5113d9a6a06f891d129742b1e5d473fe5387fd626805fb52fa90c0135eb19445b8f5e4eeb98c8d3909101b9cec23bbba316eec6fe62f5c01cdf759
-
SSDEEP
1536:o4PVjvQFZ7Fxqlq+MLMRqyBpIRqysUp/ZcyLP:o4PVjv2ZFxqMFyBpOsUjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33a7c4ce715b6b5f1aac4f3698d7dd5e
Files
-
33a7c4ce715b6b5f1aac4f3698d7dd5e.exe windows:4 windows x86 arch:x86
cd1c754622bc2bfdff3aff04aa214e07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
LoadLibraryExA
GlobalUnlock
FindResourceW
GetProcessHeap
SetLastError
GetModuleHandleA
UnmapViewOfFile
TlsGetValue
GetEnvironmentVariableA
GetStdHandle
GetExitCodeProcess
GlobalFree
CreateFileW
CloseHandle
GetCurrentThreadId
HeapCreate
lstrlenW
ReleaseMutex
lstrcpyA
user32
DrawEdge
CreateMenu
CreateWindowExA
CallWindowProcA
DrawMenuBar
DispatchMessageA
IsWindow
CheckRadioButton
FillRect
GetCaretPos
SetFocus
GetDC
GetDlgItem
rsaenh
CPDecrypt
CPSignHash
CPGenKey
CPHashData
CPDeriveKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dcbidnj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE