Static task
static1
Behavioral task
behavioral1
Sample
77a6a5929816e6a99969c8107e960167.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77a6a5929816e6a99969c8107e960167.exe
Resource
win10v2004-20231215-en
General
-
Target
77a6a5929816e6a99969c8107e960167
-
Size
181KB
-
MD5
77a6a5929816e6a99969c8107e960167
-
SHA1
16df6454328be9c48024ea11b0272fb9fb183b43
-
SHA256
eafdac904a56a331a7a7cf28f3d396ec54eb99881dbfa7f6f23078a8b64707a8
-
SHA512
0e2e173eb902c072fe0266a03c14d983510b32f8f3d422ad074812ecb13785302c1b0d3c8af0b687526216ee7b6b398b845c5bfa94e03a46f51cd35b2d14ebe4
-
SSDEEP
3072:hWUfaU/ICcubwjCAvzoiPeft1tDiRSz4Jj:hW3U/hseOozwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a6a5929816e6a99969c8107e960167
Files
-
77a6a5929816e6a99969c8107e960167.exe windows:4 windows x86 arch:x86
776e4b14f9211cadfb621b5b0d7162d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
tan
atan
log
sin
atol
memcmp
sprintf
wcstol
memmove
shell32
SHGetFolderPathA
SHGetDesktopFolder
Shell_NotifyIconA
comdlg32
FindTextA
GetSaveFileNameA
advapi32
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
GetUserNameA
shlwapi
SHStrDupA
SHDeleteValueA
SHQueryInfoKeyA
SHDeleteKeyA
PathFileExistsA
PathIsDirectoryA
SHEnumValueA
SHGetValueA
PathGetCharTypeA
PathIsContentTypeA
SHQueryInfoKeyA
PathFileExistsA
PathIsContentTypeA
SHQueryValueExA
SHSetValueA
PathIsDirectoryA
SHStrDupA
kernel32
GetVersionExA
GetModuleHandleW
GetModuleHandleA
LoadLibraryExA
GetProcAddress
IsBadReadPtr
LocalAlloc
GetCommandLineW
ExitThread
VirtualAlloc
ExitProcess
lstrlenW
user32
LoadStringA
oleaut32
RegisterTypeLib
SysAllocStringLen
SafeArrayCreate
GetErrorInfo
SafeArrayGetElement
SysFreeString
SafeArrayUnaccessData
SysStringLen
SafeArrayGetUBound
OleLoadPicture
ole32
CoCreateGuid
CreateStreamOnHGlobal
OleCreateStaticFromData
CreateBindCtx
CoRevokeClassObject
CoGetObjectContext
gdi32
RestoreDC
CreateBitmap
CreatePenIndirect
GetDCOrgEx
GetPaletteEntries
version
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_Draw
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetBkColor
ImageList_Add
ImageList_Read
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ