Static task
static1
Behavioral task
behavioral1
Sample
60479dc9e8d074b23d71c0ba19076b65.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
60479dc9e8d074b23d71c0ba19076b65.exe
Resource
win10v2004-20231215-en
General
-
Target
60479dc9e8d074b23d71c0ba19076b65
-
Size
24KB
-
MD5
60479dc9e8d074b23d71c0ba19076b65
-
SHA1
33ec84f047c4a822d44832cf1ee0bea0bbefd7dc
-
SHA256
48d0c99d55a2604ef318087f113e03f24bba284845e8bc40cab8ec2769e9abaf
-
SHA512
9afb72e4494971022baf0858d232fcd8f86fd2b78b3ba9dcb50137cd3b04566048e356164e9d21f9ff16ab6acf190c5e32fed7eaee2b6b56e0ac8283cfd69448
-
SSDEEP
384:Oc+L3xrRI46Vt9Wt5ugIagRjjcz73OWjqZ/23Nb1/iXHpuyeE4Fto6iLt:OcMlRI4iU5Yaycz73O4qZ/2JhmHpuye2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60479dc9e8d074b23d71c0ba19076b65
Files
-
60479dc9e8d074b23d71c0ba19076b65.exe windows:4 windows x86 arch:x86
1a4100591c908c880b5795759ef35a53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrlenA
CreateMutexA
OpenMutexA
CreateFileA
lstrcatA
lstrcpyA
Sleep
InterlockedDecrement
WideCharToMultiByte
lstrlenW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
TerminateProcess
CreateToolhelp32Snapshot
GetLocalTime
ReadFile
SetFilePointer
SetFileAttributesA
WriteFile
FindFirstFileA
GetModuleFileNameA
GetTempPathA
CreateThread
GetWindowsDirectoryA
LoadLibraryA
Process32First
Process32Next
CloseHandle
LocalFree
GetLastError
OpenProcess
DeleteFileA
user32
CharUpperA
GetWindowThreadProcessId
SendMessageA
FindWindowExA
wsprintfA
FindWindowA
advapi32
BuildExplicitAccessWithNameA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
shell32
SHChangeNotify
ole32
CoCreateInstance
OleRun
CoInitialize
oleaut32
SysAllocStringLen
SysStringByteLen
VariantInit
SysFreeString
VariantCopy
SysStringLen
VariantClear
SysAllocString
GetErrorInfo
shlwapi
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
msvcrt
_controlfp
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_CxxThrowException
rename
_except_handler3
memset
sprintf
strchr
memcmp
??2@YAPAXI@Z
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
strlen
__CxxFrameHandler
_EH_prolog
_strupr
_wcsupr
wcsstr
memcpy
??3@YAXPAX@Z
__p___initenv
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ