Static task
static1
Behavioral task
behavioral1
Sample
63ba349bfa257ca652723538544016bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63ba349bfa257ca652723538544016bd.exe
Resource
win10v2004-20231215-en
General
-
Target
63ba349bfa257ca652723538544016bd
-
Size
167KB
-
MD5
63ba349bfa257ca652723538544016bd
-
SHA1
7df7b8ed799019a93cc6fcb95c69b499bba5982b
-
SHA256
eb01ed1074a7329093461f623930b171ec670d56936a9752c45a2ae48398338d
-
SHA512
16bb10973a2b38bf17343f4e14caeb9998920fc059a03338f059e736f11e8423797e44cdaadc825eba308508cfdf59eb6785c7edab92609e80061aa6e7e1721c
-
SSDEEP
3072:n5GMH0cmunWtlEHQcAKoJpneFOUhOc+o/kVihu5:bUcmuulSQcAKoDwOUEzVd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ba349bfa257ca652723538544016bd
Files
-
63ba349bfa257ca652723538544016bd.exe windows:4 windows x86 arch:x86
4c128e94ab32768a3a27e001b66eb683
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
LineTo
GetTextMetricsA
GetPixel
SetTextColor
RectVisible
DeleteObject
CreatePen
CreatePalette
GetDeviceCaps
SetMapMode
RestoreDC
GetStockObject
CreateSolidBrush
GetObjectA
PatBlt
SelectObject
CreateFontIndirectA
SelectPalette
CreateCompatibleDC
DeleteDC
GetClipBox
SetStretchBltMode
SetTextAlign
SaveDC
user32
GetParent
GetDesktopWindow
GetDC
GetSystemMetrics
CharNextA
TranslateMessage
kernel32
lstrcmpA
GetVersion
GetDriveTypeA
GetCurrentProcessId
GetOEMCP
GetThreadLocale
lstrlenW
DeleteFileA
lstrlenA
GetACP
GetProcessHeap
GetCurrentThread
DeleteFileW
GlobalFindAtomA
IsDebuggerPresent
GetCurrentThreadId
MulDiv
GetCurrentProcess
GetConsoleOutputCP
GetStartupInfoA
GetModuleHandleW
GetModuleHandleA
GetWindowsDirectoryA
GetCommandLineA
RemoveDirectoryA
GetUserDefaultLangID
CopyFileA
VirtualAlloc
VirtualFree
GetCommandLineW
GlobalFindAtomW
lstrcmpiA
lstrcmpiW
QueryPerformanceCounter
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Jlfbo, V Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Byhyxwph Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ