Static task
static1
Behavioral task
behavioral1
Sample
77731da1dc6dac470d1ffe9ec2e587b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77731da1dc6dac470d1ffe9ec2e587b0.exe
Resource
win10v2004-20231215-en
General
-
Target
77731da1dc6dac470d1ffe9ec2e587b0
-
Size
38KB
-
MD5
77731da1dc6dac470d1ffe9ec2e587b0
-
SHA1
c7252421500c3b77dc483df46c95a8c16d5960bd
-
SHA256
6d1cc5cb29ec8d31194ffa850dacf6246bb499ebfc2cb2080db2981adbc706ec
-
SHA512
261954d52947706939129fd7a13eb68bdaed2a018b58a88d19fb17e2ad9dadec52cf75384cead4e6515dddb26eda71e558d381894418e2ee2a1fd9a51e985fa8
-
SSDEEP
768:iCm7GZD/AOCDGkvPg1rcE5vGT8NTNjDlc6Sv8Ea3A+:e7Gp/AXPcL+8NpXlFfw+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77731da1dc6dac470d1ffe9ec2e587b0
Files
-
77731da1dc6dac470d1ffe9ec2e587b0.exe windows:5 windows x86 arch:x86
0bb71d5c3d065de4e8f811a387eee083
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sqlunirl
_GetVersionEx@4
_BuildCommDCBAndTimeouts_@12
_MessageBoxIndirect_@4
_CopyFile_@12
_FreeEnvironmentStrings@4
_SetWindowLong@12
_GetPrivateProfileStruct_@20
_SetComputerName_@4
_BuildCommDCB_@8
_DialogBoxParam_@20
_GetOutlineTextMetrics_@12
_DefMDIChildProc_@16
_GetLogColorSpace_@12
_LoadAccelerators_@8
_GetLogicalDriveStrings_@8
_GlobalGetAtomName_@12
_QueryServiceLockStatus_@16
_GetAtomName_@12
_ClearEventLog_@8
_InsertMenuItem_@16
_GetTextExtentPoint32@16
_GetModuleFileName@12
winmm
joyGetPosEx
midiOutSetVolume
midiStreamProperty
waveInStop
WOW32ResolveMultiMediaHandle
mmioCreateChunk
midiStreamClose
midiStreamPause
joyGetPos
midiOutPrepareHeader
aux32Message
mmioAscend
mmioInstallIOProcW
waveOutGetErrorTextW
DrvGetModuleHandle
mmioWrite
kernel32
GetCurrentThread
GetConsoleSelectionInfo
LoadLibraryW
GetSystemWindowsDirectoryA
GetSystemTimeAdjustment
WaitForSingleObject
GetLocaleInfoA
ResumeThread
GetUserDefaultLangID
GetComputerNameExA
GetEnvironmentStrings
SetFilePointer
lstrcpyA
GetVolumePathNamesForVolumeNameW
EnumDateFormatsW
CancelWaitableTimer
QueryPerformanceCounter
SetVolumeMountPointA
SetLastConsoleEventActive
FindFirstVolumeMountPointW
HeapSummary
GetLogicalDriveStringsW
GlobalSize
GetModuleHandleA
AddConsoleAliasA
GetGeoInfoA
CreateEventW
RemoveDirectoryA
InterlockedIncrement
EnumCalendarInfoW
lstrcmpiW
EnumSystemCodePagesA
CloseProfileUserMapping
crtdll
__fpecode
_osmode_dll
_mbslwr
_ismbcl2
iswctype
wcsftime
_baseminor_dll
_findnext
_ismbbprint
iswcntrl
_cexit
_execlpe
_purecall
difftime
_beginthread
_aexit_rtn_dll
_mbcjmstojis
_clearfp
fgetwc
_ismbblead
wctomb
wcslen
_mbctombb
_seterrormode
_pwctype_dll
_strnset
ole32
OleLoad
CoSuspendClassObjects
HMENU_UserMarshal
GetHookInterface
CoEnableCallCancellation
OpenOrCreateStream
HBITMAP_UserMarshal
CoQueryAuthenticationServices
OleSetClipboard
WriteClassStg
CoReleaseServerProcess
CLIPFORMAT_UserSize
SetDocumentBitStg
oleaut32
VarUI8FromR8
VarR8FromI2
VarR8FromDate
VarI1FromDate
VarCyCmp
VarAdd
VarUI8FromR4
VarFormat
VarCyNeg
VarBstrFromR8
VarUI1FromI1
VarDateFromI8
SafeArrayAccessData
BSTR_UserUnmarshal
SafeArrayAllocDescriptorEx
VarUI4FromDate
ClearCustData
VarR4FromDisp
VarUI1FromUI4
DosDateTimeToVariantTime
OleCreateFontIndirect
OACreateTypeLib2
SafeArrayUnlock
VarUI1FromUI2
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 442B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ