Static task
static1
Behavioral task
behavioral1
Sample
72d15e242d14f21d3194cec189fdd4b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72d15e242d14f21d3194cec189fdd4b8.exe
Resource
win10v2004-20231215-en
General
-
Target
72d15e242d14f21d3194cec189fdd4b8
-
Size
746KB
-
MD5
72d15e242d14f21d3194cec189fdd4b8
-
SHA1
5e57016f958b10c842c8025a57cbf335f3b7723a
-
SHA256
36aebe73a8613640390736584e62121880375d96f4d3aef2ecf7ebe7dec1821d
-
SHA512
37f0ed059ec63f0c8a6d775d511365c83c824a92b98c67c4d433c84e0fd21f9460cee6f47b9efeb7b2d0c67caf174d305c6d96f9bb9eb47ce0c6ee7a25d46ff0
-
SSDEEP
12288:UdXdhtQJuII+JzBkRlHnPNeciJYfQi7rAIseOl1yHbYaRqnnUA2/1nnh3ECqzmbl:UdXLSJ+QwH1wYY1eKmJHN/BnmFmbQJSH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72d15e242d14f21d3194cec189fdd4b8
Files
-
72d15e242d14f21d3194cec189fdd4b8.exe windows:5 windows x86 arch:x86
dffdb27646caa5951e2f179f4ab3cbee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
FindVolumeClose
SetFileAttributesW
GetFileAttributesA
GetDriveTypeA
FindVolumeClose
GetCommandLineW
EnterCriticalSection
LocalSize
lstrlenA
ReadFile
FindClose
GetFileType
IsBadReadPtr
HeapCreate
GetCurrentDirectoryW
GetCommandLineA
GetModuleHandleA
WaitForMultipleObjects
GetEnvironmentVariableW
ExitThread
GlobalLock
HeapFree
GetFileTime
CloseHandle
uxtheme
DrawThemeEdge
IsThemeActive
GetThemeBool
OpenThemeData
GetThemeTextMetrics
GetThemeTextExtent
DrawThemeBackground
CloseThemeData
SetWindowTheme
GetThemeColor
GetWindowTheme
CloseThemeData
GetThemeEnumValue
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE