Static task
static1
Behavioral task
behavioral1
Sample
62d9a70754fc1f5d5cfe654474640914.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
62d9a70754fc1f5d5cfe654474640914.exe
Resource
win10v2004-20231222-en
General
-
Target
62d9a70754fc1f5d5cfe654474640914
-
Size
140KB
-
MD5
62d9a70754fc1f5d5cfe654474640914
-
SHA1
1269048dca0ce33afb05e4761bb716c6cea49ffc
-
SHA256
a5ebbb832e37afd17ccca865a5e1381b5af96b3fd9c1ea0222713e1567490ea2
-
SHA512
dacd08ff1e34fa4a2ddfa6723bbd135a8935eae02eaa20d58509305be1a1660a742131945a4fca3e8b896ced6694dbda08c4aa7c11fcd13daa97015542db0e1a
-
SSDEEP
1536:RHKsxNCHmmOfA+nwnans1lkhbW7x6m8156mX0Pk8T8McHnPwwX07fwljsifEFp:1zCHManansYE7x6bx87cHPpE7ri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d9a70754fc1f5d5cfe654474640914
Files
-
62d9a70754fc1f5d5cfe654474640914.exe windows:4 windows x86 arch:x86
7c5868b9a66a2877a4d08943d6dfcf3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_GetDragImage
ImageList_LoadImage
ImageList_Read
ImageList_GetImageRect
ImageList_Remove
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Replace
ImageList_Create
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_Merge
InitCommonControls
ImageList_AddMasked
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_EndDrag
advapi32
RegCreateKeyW
RegOpenKeyA
RegEnumKeyW
RegCreateKeyExA
RegCreateKeyExW
RegGetKeySecurity
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegOpenKeyW
RegEnumValueA
RegQueryValueExW
RegLoadKeyA
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
RegQueryInfoKeyA
gdi32
ExtTextOutA
GetBitmapBits
GetClipBox
BitBlt
ClearBrushAttributes
RestoreDC
CreateSolidBrush
GetPixel
AbortPath
CopyMetaFileA
CloseFigure
CancelDC
GetPixel
GetCurrentPositionEx
AddFontResourceExW
GetCurrentPositionEx
AddFontResourceA
ExcludeClipRect
GetPixel
GetClipBox
CancelDC
AddFontResourceW
AddFontResourceExW
BitBlt
ExtTextOutA
GetDCOrgEx
GetBitmapBits
GetBrushOrgEx
RestoreDC
AddFontResourceTracking
GetPixel
AddFontMemResourceEx
ClearBitmapAttributes
CloseFigure
ClearBrushAttributes
kernel32
FindFirstFileA
DeleteAtom
CopyFileW
GetStdHandle
ReadConsoleA
ExitThread
ReadConsoleW
DeleteFileA
Sleep
GetConsoleMode
GetComputerNameA
GetLastError
CopyFileExA
CreateDirectoryA
FindAtomA
WriteFile
user32
CloseWindow
GetFocus
GetCursor
DrawTextW
InsertMenuA
GetDlgItem
LoadCursorA
CopyRect
CopyImage
GetWindowTextA
DrawTextA
IsWindow
LoadMenuA
CalcMenuBar
EndDialog
IsMenu
DialogBoxParamA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 518B
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ