Static task
static1
Behavioral task
behavioral1
Sample
773199e816381cac1916d891987b8d19.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
773199e816381cac1916d891987b8d19.exe
Resource
win10v2004-20231222-en
General
-
Target
773199e816381cac1916d891987b8d19
-
Size
22KB
-
MD5
773199e816381cac1916d891987b8d19
-
SHA1
497e7f4a0a0ba777b0715e97b107e589ce2b921a
-
SHA256
33a4618e06f4b01810c5243041df2084d5c3ba7ad736383f3d6985932c65f8ce
-
SHA512
c1cabc4c316aa1cbbe8bf3d5464936077a492f564da5f656265000f53c75b52dc7a8ebb9e3b2d76b079899e705f99f98ee59445b1032da847e8ae30cc7c5ae1e
-
SSDEEP
192:UXC8Wft+hMSufUmtXsGN8zmsgG7unOAH4Bal+NHNNEDO6PKOAkJOVn8LkTOdKGIr:2hhi1N8yTnOG4c+mC6VNwUK3qxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 773199e816381cac1916d891987b8d19
Files
-
773199e816381cac1916d891987b8d19.exe windows:5 windows x86 arch:x86
fff150fb931898946852e49a4117996b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
HeapFree
SetLastError
WaitForSingleObject
GetCommandLineW
GetDriveTypeA
GetTickCount
GetFileTime
GetFileAttributesA
SetLastError
IsBadReadPtr
EnterCriticalSection
HeapCreate
ReadFile
GetModuleHandleA
SetFileAttributesW
GetCurrentDirectoryW
GetFileType
ExitProcess
LocalSize
CloseHandle
MapViewOfFile
GetEnvironmentVariableW
GlobalLock
SuspendThread
uxtheme
GetThemeBool
CloseThemeData
IsThemeActive
GetThemeTextMetrics
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeEnumValue
OpenThemeData
GetThemeColor
DrawThemeBackground
DrawThemeEdge
SetWindowTheme
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE