Static task
static1
Behavioral task
behavioral1
Sample
75e3b52347607b81d8e8eec0d7f319dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75e3b52347607b81d8e8eec0d7f319dd.exe
Resource
win10v2004-20231215-en
General
-
Target
75e3b52347607b81d8e8eec0d7f319dd
-
Size
225KB
-
MD5
75e3b52347607b81d8e8eec0d7f319dd
-
SHA1
f69d9104cb7a13d4a7194dd5b040f386cccf1581
-
SHA256
6aedd9ebb0c1b1681105dafaa6135075a2a6be0ea543aaaf50603faf95f58e9b
-
SHA512
a452b6346e900fc701f5d06872f6a614a0fbfa2349304c51b410ffdb5724d4d74e07229ec2862c0b3d18ef98dd991e79d8274f81288540e2f3111940a5e096de
-
SSDEEP
6144:Tb6Q9nAoudW29vDO3OEp+7hn8NIjRnq0eXZ4pJqlq:fTMCOE0hwIjRnZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75e3b52347607b81d8e8eec0d7f319dd
Files
-
75e3b52347607b81d8e8eec0d7f319dd.exe windows:4 windows x86 arch:x86
5a4c3ed95a1bb8b5028f3c0b77572f36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime
user32
wsprintfA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ