Static task
static1
Behavioral task
behavioral1
Sample
757440ebf1751fa3988763317b454906.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
757440ebf1751fa3988763317b454906.exe
Resource
win10v2004-20231215-en
General
-
Target
757440ebf1751fa3988763317b454906
-
Size
180KB
-
MD5
757440ebf1751fa3988763317b454906
-
SHA1
4c2939f07ae7f1f03921126488de8e91b8933dcd
-
SHA256
e530659c9236d8315e4f68be0c9228bbdc971d3b09b371de4accb298401d41d8
-
SHA512
0912ae6298b0fddb5beae6e455e105c7bd1ebeea36bda531c286a4931aaf02f293a372400d4e5159d28244b42fad3b7e6d27641cd8abefccb8d9ac1c4f7f8327
-
SSDEEP
1536:8wg8kg89Iz9ki2YYrGzkLTDEknvWjmvtJrlItWBtoY1CbFi6c9:8wsguHjYqD+mvtJrqtWBX1CbFjc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757440ebf1751fa3988763317b454906
Files
-
757440ebf1751fa3988763317b454906.exe windows:4 windows x86 arch:x86
7332ca833cf749d8c6fb8830b4a26918
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
CloseHandle
WaitForSingleObject
lstrlenA
lstrcmpiA
Sleep
CreateThread
CreateEventA
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
GetLastError
FreeLibrary
LoadLibraryExA
GetCommandLineA
GetProcAddress
LoadLibraryA
SuspendThread
ResumeThread
ResetEvent
EnterCriticalSection
LeaveCriticalSection
GlobalFree
GlobalAlloc
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
SetLastError
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
SetEvent
TlsFree
GetStringTypeW
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
GetFileAttributesA
VirtualFree
HeapCreate
ExitProcess
WriteFile
GetStdHandle
user32
TranslateMessage
wsprintfA
PostThreadMessageA
CharUpperA
CharNextA
GetMessageA
DispatchMessageA
UnregisterClassA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
ole32
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoUninitialize
CoInitialize
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoRevokeClassObject
oleaut32
LoadRegTypeLi
SafeArrayAccessData
SafeArrayUnaccessData
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE