Static task
static1
Behavioral task
behavioral1
Sample
662fae074aead0c9d63a37988fa49f1a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
662fae074aead0c9d63a37988fa49f1a.exe
Resource
win10v2004-20231215-en
General
-
Target
662fae074aead0c9d63a37988fa49f1a
-
Size
237KB
-
MD5
662fae074aead0c9d63a37988fa49f1a
-
SHA1
34d244f7c229659389cce319f9dfae857f206284
-
SHA256
3eea868d39a66fd5c896d4a51150e98471b02cd5afd6e95319c83f3eb6f8a93e
-
SHA512
f4d794667b3f65710888ad568bf6f1faa3d2d9ae6dae3840bfa3c53438904a407fc07b89a7660183d8bcc1aa9f7cf34130929fa35e7e4cbfb8930c6e130a0e68
-
SSDEEP
3072:6p9BIuDnIcTZNdxiO5+bn09BQh4pB4Oow28bt4wjupoNPs8SQhN310jD:uVnXQbGu4pB4OTJ4Qupoy+Nl0jD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662fae074aead0c9d63a37988fa49f1a
Files
-
662fae074aead0c9d63a37988fa49f1a.exe windows:4 windows x86 arch:x86
8a8ffeb5e58833e00d91adaabcbc8504
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CloseHandle
GetTickCount
TerminateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetProcAddress
LoadLibraryA
FreeLibrary
GetACP
lstrcmpiA
HeapAlloc
HeapFree
WriteFile
FindFirstFileA
HeapCreate
HeapDestroy
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FindNextFileA
GetModuleFileNameA
FindClose
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
lstrcatA
lstrlenA
lstrcpyA
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
VirtualAlloc
user32
SendMessageA
PostMessageA
SendDlgItemMessageA
GetClientRect
EndDialog
LoadStringA
MessageBoxA
DialogBoxParamA
SetDlgItemTextA
GetDlgItem
EnableWindow
wsprintfA
comdlg32
GetOpenFileNameA
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
comctl32
ord17
endac
SetLfeOn
SetChannelMode
SetDACFreq
SetDACBitRate
CreateDAC
SetSrcFreq
SetSrcChannel
SetSrcBits
WriteDACData
CloseDAC
SetDACLayer
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tc Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE