Static task
static1
Behavioral task
behavioral1
Sample
74537c12e5328764f35aff16e96ac192.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74537c12e5328764f35aff16e96ac192.exe
Resource
win10v2004-20231222-en
General
-
Target
74537c12e5328764f35aff16e96ac192
-
Size
165KB
-
MD5
74537c12e5328764f35aff16e96ac192
-
SHA1
b20d6166e0a2f3ba07e00208c6e3ea931e4ee62d
-
SHA256
78a0705f7e4a47bd09399e4e65d2ef486a2b021811493706baf5baa839b7bd54
-
SHA512
e9adad08672169b90f189744dc8eaf3a120c3797c965691d711bd6482f6e0e302da9a5a6932c9a77069cf02c45a5e68769e47ba71ae79ac8a8535cecea0283af
-
SSDEEP
3072:0kZDYMFV5R62xZgI0+8cPJC+Z5txAJxOZ+iDboKtGaB5DF6VlkEatRP:0bMFVS2FPFTvJDb7gaR6VlWR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74537c12e5328764f35aff16e96ac192
Files
-
74537c12e5328764f35aff16e96ac192.exe windows:4 windows x86 arch:x86
8b24e816583005fe247cf15cdaea77d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTickCount
GetVersionExA
GlobalGetAtomNameA
GetPrivateProfileStringW
InitializeCriticalSection
lstrlenW
FindClose
GlobalSize
LoadResource
GetModuleFileNameW
GetPrivateProfileIntW
GetModuleHandleW
MultiByteToWideChar
EnumResourceTypesW
Sleep
LoadLibraryW
LockResource
MulDiv
IsDBCSLeadByte
DeleteCriticalSection
FreeLibrary
GetVersionExW
WritePrivateProfileStringW
GetProcAddress
FindFirstFileW
GetLocaleInfoW
wininet
InternetTimeToSystemTime
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetErrorDlg
InternetOpenA
HttpSendRequestA
InternetCrackUrlA
InternetTimeFromSystemTime
shell32
SHGetImageList
SHGetPathFromIDListA
SHGetFileInfoA
SHGetFolderPathW
SHFileOperationW
SHBrowseForFolderA
ShellExecuteW
CommandLineToArgvW
ShellExecuteExA
ShellExecuteExW
Shell_NotifyIconA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ