Static task
static1
Behavioral task
behavioral1
Sample
72e713ba5941c7567141f37f178ce971.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72e713ba5941c7567141f37f178ce971.exe
Resource
win10v2004-20231215-en
General
-
Target
72e713ba5941c7567141f37f178ce971
-
Size
94KB
-
MD5
72e713ba5941c7567141f37f178ce971
-
SHA1
0359fb6154e40402fa4acd2ca3cef9a258628fa4
-
SHA256
c2649b9017a1813818850962cbc7117d2b0189bf741efc6c543dd820063c5eb7
-
SHA512
88172562a37c3798e60aa5ae89856192db2beeaa66db2b5f02cf940c0fad43bc69b1bbf97b64fb3ab40a62f762177d4105b79efa5c36ae9f215bd9761057ddf7
-
SSDEEP
1536:w39gcvK9d8xpOcBebSH8cCBUOCak+OMA5f5OTqsVWA9NmNwfWBDPiMtFihG:w395vK9d2EoemH8cRPXMi8qsRgNwfWB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e713ba5941c7567141f37f178ce971
Files
-
72e713ba5941c7567141f37f178ce971.exe windows:5 windows x86 arch:x86
4edc75adcee2de1245d4abd1a177d421
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCOrgEx
GetTextExtentPoint32A
AngleArc
SelectPalette
ExtTextOutA
BitBlt
ExtSelectClipRgn
SetDIBits
SetROP2
GetViewportExtEx
GetTextExtentPoint32W
CombineRgn
GetNearestColor
RestoreDC
PlayMetaFile
SetMapMode
StretchDIBits
GetTextExtentPointA
CloseMetaFile
SetBrushOrgEx
PlayMetaFileRecord
FillRgn
DeleteObject
GetSystemPaletteEntries
DeleteMetaFile
ScaleWindowExtEx
CreateFontW
SetRectRgn
PolyBezierTo
kernel32
ExitProcess
VirtualAlloc
GetCPInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
msvcrt
_adjust_fdiv
strncat
strtol
wprintf
__set_app_type
fputs
__setusermatherr
isxdigit
_open_osfhandle
_CxxThrowException
_itoa
wcstoul
_wfopen
_lock
wcscmp
_strnicmp
_onexit
calloc
mbstowcs
_wcsdup
_beginthread
_dup
iswctype
_purecall
__p__commode
_fileno
wcsncpy
ftell
ctime
__p__fmode
_except_handler3
__p___initenv
gmtime
memmove
_tzset
_initterm
swscanf
advapi32
RegEnumKeyExW
GetTokenInformation
RegEnumKeyExA
LookupPrivilegeValueA
ChangeServiceConfigA
RegSetValueExW
FreeSid
RegDeleteValueA
LookupAccountSidW
GetSecurityDescriptorControl
CloseServiceHandle
InitializeAcl
LockServiceDatabase
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
UnlockServiceDatabase
RegEnumValueW
AllocateAndInitializeSid
EqualSid
comctl32
CreatePropertySheetPageA
PropertySheetW
ImageList_ReplaceIcon
PropertySheetA
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx
CreateToolbarEx
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Create
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 30KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ