Static task
static1
Behavioral task
behavioral1
Sample
74c32b84d9e8b26453e10df972f827b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74c32b84d9e8b26453e10df972f827b8.exe
Resource
win10v2004-20231222-en
General
-
Target
74c32b84d9e8b26453e10df972f827b8
-
Size
40KB
-
MD5
74c32b84d9e8b26453e10df972f827b8
-
SHA1
8a915e7b07351b78de060931ff9c6fd0d1e957c5
-
SHA256
5aff7502e9e1fa1b06dd38582140432d411701336598c61389de5f0142a55018
-
SHA512
bbb165080b28041309f5648f1736fa6f79d6619a6c8e9263885d2d7c3f5882fae4a0b379d3866baa3d3ca906d71d8b53d9bfc0bc39a17a17e38ac18be0453e37
-
SSDEEP
768:TPtKjKWdL/skuHTVlHtcD9amIPdHgxjo:TP4j/NshfNcAmIPb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c32b84d9e8b26453e10df972f827b8
Files
-
74c32b84d9e8b26453e10df972f827b8.exe windows:4 windows x86 arch:x86
ec5d01e25309277fdb00d1dbaa375ba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemDirectoryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
CreateProcessA
GetFileType
SetHandleCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
VirtualQuery
user32
FindWindowA
LoadCursorA
RegisterClassA
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
RegisterWindowMessageA
LoadMenuA
GetSubMenu
LoadIconA
PostQuitMessage
SendMessageA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DefWindowProcA
DispatchMessageA
gdi32
GetStockObject
shell32
Shell_NotifyIconA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ