Static task
static1
Behavioral task
behavioral1
Sample
664ef049fb955ee6187d5b81885ae015.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
664ef049fb955ee6187d5b81885ae015.exe
Resource
win10v2004-20231215-en
General
-
Target
664ef049fb955ee6187d5b81885ae015
-
Size
155KB
-
MD5
664ef049fb955ee6187d5b81885ae015
-
SHA1
7d5274be3643ef549803cc2dc0218965f08040de
-
SHA256
dd81460a0529151880fd8973bc80f5d8b9dcdaa9649bd919cb8cef27e220983a
-
SHA512
03b8c6a3bfd5efe233750f44bad8dfe3415a0b1b3ebf47a206ce92c1f93c5c340219122976ef9de2e8e87c66bd7b7b26ce9f42b34c53ddeb52c45c5ede5a49ef
-
SSDEEP
3072:d391SrTgVdvWF7x+D7f6D2C4fSjAqDRXX+dYFx9k21OpTOyH6:xSrTgVdK7x+Dzs4IDF+dR21OdB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 664ef049fb955ee6187d5b81885ae015
Files
-
664ef049fb955ee6187d5b81885ae015.exe windows:4 windows x86 arch:x86
7a199cf4b5ce56da811fb2e848e6fe36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemFree
CoRegisterClassObject
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoInitialize
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
shlwapi
PathCombineW
PathFileExistsW
user32
wsprintfW
DispatchMessageW
CharUpperW
PostThreadMessageW
TranslateMessage
SendMessageA
KillTimer
GetDC
CharNextW
GetMessageW
SetTimer
UnregisterClassA
kernel32
lstrcpyA
OutputDebugStringW
GetTickCount
lstrcpyW
FindClose
lstrcmpiW
GetProcessAffinityMask
MultiByteToWideChar
GetCPInfo
EnumResourceNamesW
lstrlenW
LockResource
InitializeCriticalSection
lstrcpyA
GlobalAlloc
FreeEnvironmentStringsW
GlobalFree
GetACP
WideCharToMultiByte
GetLastError
GetModuleHandleW
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ