Static task
static1
Behavioral task
behavioral1
Sample
79a84052a7b3d34775a1853bc17872f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79a84052a7b3d34775a1853bc17872f5.exe
Resource
win10v2004-20231222-en
General
-
Target
79a84052a7b3d34775a1853bc17872f5
-
Size
326KB
-
MD5
79a84052a7b3d34775a1853bc17872f5
-
SHA1
9447e6a64c21b2eb9521a6451c2ff79236b40bc9
-
SHA256
bc50b330945167b58393734135ed2c0ccbbfe7fe6ae71a732ee650fec8ccffaa
-
SHA512
9f49a869de8ef5d8d63f5d78001ac338519bb8c15ff9af51854ea15f5ef4c4672f931e9131890903e3c34e6de4f2942899f23bed8e4f5ad1ee86bffa1279b906
-
SSDEEP
6144:8qwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrH:OO1xm+QoK0t4K3gCTDYWGrYzt+NSTL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79a84052a7b3d34775a1853bc17872f5
Files
-
79a84052a7b3d34775a1853bc17872f5.exe windows:4 windows x86 arch:x86
5503e9956c1af273083e95a462a8b1f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
CreateThread
HeapCreate
LocalFree
Sleep
CreateFileA
GetDateFormatA
ResetEvent
LoadLibraryW
FindVolumeClose
SetLastError
GetTickCount
GetComputerNameA
GetModuleHandleA
GetSystemTime
GetDiskFreeSpaceA
CloseHandle
UnmapViewOfFile
LocalUnlock
lstrlenA
user32
FillRect
GetDC
GetDlgItem
GetComboBoxInfo
DrawEdge
SetFocus
IsWindow
CreateWindowExA
CallWindowProcA
CheckRadioButton
DrawStateA
DispatchMessageA
DrawMenuBar
advapi32
FreeSid
RegCloseKey
RegDeleteKeyA
IsTokenUntrusted
RegEnumValueA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ