Static task
static1
Behavioral task
behavioral1
Sample
67563a044e071e46e5e6b7a1039765ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67563a044e071e46e5e6b7a1039765ae.exe
Resource
win10v2004-20231215-en
General
-
Target
67563a044e071e46e5e6b7a1039765ae
-
Size
127KB
-
MD5
67563a044e071e46e5e6b7a1039765ae
-
SHA1
1b56b2e32bd9f376a2427c432f25f381e597e184
-
SHA256
e81b428ac57c1c86bdf4536dcc27ff95fbd1a92172e46784479d8087f3929baf
-
SHA512
ba27f1278e64ac83bc1a06418d0b9f98be0a0640b201fdf1de70409082052374cacc85efad1a7fd2ce739e85badfb51962910a952b44d27976240fe71e1fc5ea
-
SSDEEP
3072:aq9+o0nXtDdcf1hdqrKfK84hRb7sJk7gAXzf1J:B9+o0nXtDdo1hd4KR4vbwJCfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67563a044e071e46e5e6b7a1039765ae
Files
-
67563a044e071e46e5e6b7a1039765ae.exe windows:5 windows x86 arch:x86
b28f1e37db3adc1995bf401ca65650b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow
advapi32
RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA
ole32
OleInitialize
CLSIDFromProgID
CoCreateInstance
gdi32
GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA
kernel32
ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource
ntdll
RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 130KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ