Static task
static1
Behavioral task
behavioral1
Sample
76a52e0f78bae48b993dc88bf482c7e3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76a52e0f78bae48b993dc88bf482c7e3.exe
Resource
win10v2004-20231215-en
General
-
Target
76a52e0f78bae48b993dc88bf482c7e3
-
Size
174KB
-
MD5
76a52e0f78bae48b993dc88bf482c7e3
-
SHA1
85a42787e8b3eb538737abbe672f7a91b00097d9
-
SHA256
8f03db3ed48b5c5d6841f69cd8128380b12b65c1d718430e7cd5761589aa4885
-
SHA512
df44cff99ece46a6c908823aa329d3835027d3bb4b64034eebe9453a8ddda4b86b8f2aa270a3dab33fc169d532b0ee853d4f613f10dc9c99e1008d6f01a0cd54
-
SSDEEP
3072:50MT/8vPJvm/or+pzA7FF5iVDrvGai3OUanp5oYOArPfOKQDpl0XxThtONuCfmW:msqdKVUf50rv8Ha3oYOArW7Dr0X5IuCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76a52e0f78bae48b993dc88bf482c7e3
Files
-
76a52e0f78bae48b993dc88bf482c7e3.exe windows:5 windows x86 arch:x86
2ef87b6e2ee9833f3cd424efb044af42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RealizePalette
GetDIBColorTable
UnrealizeObject
IntersectClipRect
CreateDIBSection
CreateDCW
SetWindowExtEx
SetRectRgn
SetBkMode
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
CreateICW
StartDocW
SetWindowOrgEx
DPtoLP
SetTextColor
GetCharWidth32W
EnumFontFamiliesW
GetDIBits
oleaut32
OleIconToCursor
user32
DefDlgProcA
GetMenuItemRect
RegisterHotKey
CheckDlgButton
ShowWindowAsync
RegisterClassW
TranslateAcceleratorA
EndDialog
SetCaretPos
DrawEdge
CreateDialogParamA
FrameRect
GetUpdateRect
GetDC
DefWindowProcW
ModifyMenuW
WaitForInputIdle
PostThreadMessageA
TranslateMessage
InsertMenuItemW
FindWindowExW
DrawTextA
GetClassLongA
BeginPaint
GetMenuStringA
SendMessageTimeoutW
IsCharAlphaNumericW
GetDialogBaseUnits
SendMessageW
DialogBoxParamW
SetFocus
LoadBitmapW
GetClassInfoExW
InvalidateRgn
CreateDialogParamW
GetDCEx
GetCaretPos
DestroyAcceleratorTable
wvsprintfW
IsCharAlphaW
GetClassNameW
SetMenuDefaultItem
SetSysColors
RedrawWindow
CheckRadioButton
CharToOemW
ShowCursor
SetActiveWindow
TrackPopupMenu
GetAsyncKeyState
DestroyIcon
advapi32
RegDeleteValueA
RegSetValueExW
CryptDestroyKey
RegSetValueExA
NotifyBootConfigStatus
RegCloseKey
kernel32
GlobalReAlloc
SetErrorMode
CompareStringA
lstrcpyA
DuplicateHandle
SetThreadAffinityMask
LoadLibraryW
SetLocalTime
SystemTimeToFileTime
DeleteCriticalSection
SetHandleCount
QueryPerformanceCounter
GetFileType
EnumResourceTypesA
GlobalGetAtomNameW
CreateNamedPipeA
GetLocaleInfoA
GetModuleFileNameA
LocalSize
ClearCommBreak
FindFirstFileA
GetNumberFormatA
Sections
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.psikif Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yid Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pox Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hob Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Kuduag Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.refee Size: 512B - Virtual size: 131B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ