Static task
static1
Behavioral task
behavioral1
Sample
67081776fec8303ba186c9974aeb21cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67081776fec8303ba186c9974aeb21cf.exe
Resource
win10v2004-20231222-en
General
-
Target
67081776fec8303ba186c9974aeb21cf
-
Size
278KB
-
MD5
67081776fec8303ba186c9974aeb21cf
-
SHA1
4ad1342a8f030666f0172ac0f5a4e18b806c1215
-
SHA256
ec9c6a565936d5a3375a3c399bc2c3eb65631078956e297704f950abc7c57c43
-
SHA512
cdb6f3313e877815cd30edf4bbe2807c24b3c662ea2a6ba583824b827a39c967d164e4f923658779921ddd5a2ab424a2bda18fe201bbb29815db2605594813bc
-
SSDEEP
6144:jbPDbDZ3ibaRrvYZP8TFBfjA8+aOsHeyIM51g4A8uU1Y:vPD53ibaya3pXXHeyIM51g4HuU1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67081776fec8303ba186c9974aeb21cf
Files
-
67081776fec8303ba186c9974aeb21cf.exe windows:4 windows x86 arch:x86
36678b5879482146aba7763485c7d4c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
GetVersion
GetStdHandle
FindAtomA
TlsGetValue
GetAtomNameA
LoadLibraryA
CompareFileTime
lstrlenA
GetConsoleCP
HeapReAlloc
GetModuleHandleA
WaitForSingleObject
GetTickCount
InterlockedExchange
GetProfileIntA
CloseHandle
GlobalUnlock
VirtualProtect
GetACP
HeapWalk
user32
DestroyMenu
CreateCaret
DialogBoxParamA
GetMenu
GetScrollRange
InflateRect
GetWindowTextA
DispatchMessageA
EqualRect
SubtractRect
ModifyMenuA
SetPropA
CopyRect
GetMenuStringA
SetWindowPos
InsertMenuA
ShowWindow
EnableScrollBar
PostMessageA
MessageBoxA
TranslateMessage
GetKeyboardLayout
UpdateWindow
LoadIconA
PaintDesktop
GetDlgItem
msi
MsiCloseHandle
MsiDoActionA
MsiGetMode
MsiEnumProductsA
MsiEnumClientsA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ