Static task
static1
Behavioral task
behavioral1
Sample
68b0cc7bb3290a1c0b88f1b852679e0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68b0cc7bb3290a1c0b88f1b852679e0d.exe
Resource
win10v2004-20231222-en
General
-
Target
68b0cc7bb3290a1c0b88f1b852679e0d
-
Size
182KB
-
MD5
68b0cc7bb3290a1c0b88f1b852679e0d
-
SHA1
8f1c9fe64944c421b99c9f6db959cddc3b1c34a8
-
SHA256
5ccb6440b69836adb4f423a8a7bfaee37f5db74b5a5312ae0953b567e5d1efa6
-
SHA512
69d0ce1afd48a72f819952fba527b4ab1795c8b05ad21c160ca6b57d4832d9d2c3c62213d77508bb528da7fb8ae1ca7a0913585356c4a8c3b3addec970debb0c
-
SSDEEP
3072:N3M0KMvfBDFxDsV2Jcwz3+UC9L8kD9Qj8YDox4p5gEcx9d/kJo08Hw9eP3H:NXzvftFxDk25zxggkDu+c5gEsf0Aw9e/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68b0cc7bb3290a1c0b88f1b852679e0d
Files
-
68b0cc7bb3290a1c0b88f1b852679e0d.exe windows:4 windows x86 arch:x86
5b53d978124471f7034b4fae34cb1040
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
LoadLibraryA
user32
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA
SetWindowLongA
advapi32
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
Sections
.text Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ