Static task
static1
Behavioral task
behavioral1
Sample
0613e9955f27069804b853d1bbdf09c1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0613e9955f27069804b853d1bbdf09c1.exe
Resource
win10v2004-20231215-en
General
-
Target
0613e9955f27069804b853d1bbdf09c1
-
Size
69KB
-
MD5
0613e9955f27069804b853d1bbdf09c1
-
SHA1
aadb2bafc8e9d5218826d4c97bed3686d9f94012
-
SHA256
76abcda687f453fa737ba144b7b6c20a74c4117fcf9df62d550a7813c009491f
-
SHA512
057d4dfa1f6b52f6e60e6810666f189d964953fa8862bfd6873ada04d6d0825d121b2ccb2b4b463b0e23c359241302acfb17e20eb178e23efe4100229a6e8c17
-
SSDEEP
1536:sYwPlgV3aFNjnyUE2Ukdu21ioeRkQwqRqu2szjS7Yiu:30lmUjyEI2UB5Rqu2V7Xu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0613e9955f27069804b853d1bbdf09c1
Files
-
0613e9955f27069804b853d1bbdf09c1.exe windows:4 windows x86 arch:x86
af24cb2638ad81532789fa9ff301729a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReleaseDC
SetWindowLongA
CharNextW
GetWindowLongA
GetDesktopWindow
UpdateWindow
BeginPaint
GetDC
RegisterClassA
MessageBoxA
UnregisterClassA
CreateWindowExA
DrawTextW
DestroyWindow
LoadBitmapA
LoadImageA
LoadIconA
SetForegroundWindow
DefWindowProcA
CharNextA
EnumDisplayMonitors
MessageBoxW
advapi32
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExW
RegEnumKeyExA
RegEnumValueW
CryptVerifySignatureA
RegQueryValueExA
RegSetValueExW
RegCreateKeyExW
RegCreateKeyExA
RegDeleteKeyW
RegQueryInfoKeyA
CryptHashData
CryptCreateHash
RegDeleteValueA
CryptImportKey
CryptAcquireContextA
CryptReleaseContext
RegDeleteValueW
RegSetValueExA
RegDeleteKeyA
CryptDestroyKey
CryptDestroyHash
gdi32
RealizePalette
CreateFontIndirectA
TextOutW
SelectObject
GetObjectA
GetDeviceCaps
SetStretchBltMode
SetTextColor
GetTextExtentPoint32A
DeleteDC
DeleteObject
CreateDIBitmap
CreateCompatibleDC
BitBlt
CreatePalette
SetBkMode
SelectPalette
kernel32
LoadLibraryExW
LoadLibraryA
CompareFileTime
WriteFile
OpenProcess
WaitForSingleObject
VirtualAlloc
Sleep
GetEnvironmentVariableA
IsDBCSLeadByte
MapViewOfFile
GlobalLock
CreateFileMappingA
LeaveCriticalSection
FreeLibrary
EnterCriticalSection
GetSystemTime
GetModuleFileNameW
UnmapViewOfFile
GetVersion
GetModuleHandleA
GetProcAddress
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ