Static task
static1
Behavioral task
behavioral1
Sample
077cb8923f6db90b978d29b8f5a6466e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
077cb8923f6db90b978d29b8f5a6466e.exe
Resource
win10v2004-20231215-en
General
-
Target
077cb8923f6db90b978d29b8f5a6466e
-
Size
56KB
-
MD5
077cb8923f6db90b978d29b8f5a6466e
-
SHA1
5bd530ebfffd9b7c0fead9d0ed353b70bc025848
-
SHA256
b851e4b9374d5a8d7b9f32ff464539ae4c74273017a5afb5a7421d7b37d287b5
-
SHA512
3ec0294496cc212419fcb9831a9e7f3333b7353e7783ff0a830f497cb22105a9350fd5e6a3fb163ec8343b0423777bd0991d62dadbac6e73138539febdd9d8dd
-
SSDEEP
768:0S3OYmDP5+QoJk8Pl8iUtp/X0Sd7NCyKkn9xUXTv60naq1BcXXt597PFCkAozAWG:/38PMluj/rxNqmXUXTpaq1mtrzEkdAP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077cb8923f6db90b978d29b8f5a6466e
Files
-
077cb8923f6db90b978d29b8f5a6466e.exe windows:4 windows x86 arch:x86
e57da24d6d94f5f4f713fffc4f8acd49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
GetFileAttributesExW
ResumeThread
GlobalUnlock
SetCurrentDirectoryW
GlobalDeleteAtom
MultiByteToWideChar
GetCurrentThread
CreateThread
FindClose
CloseHandle
WaitForSingleObject
WriteFile
LockResource
MoveFileW
lstrlenW
FindNextFileW
GlobalLock
GetProcAddress
GetLocalTime
GetModuleFileNameW
FindResourceExW
LoadLibraryA
user32
GetDlgItem
RegisterClassExW
PostThreadMessageW
GetWindowDC
UpdateWindow
LoadImageW
GetWindowThreadProcessId
PostQuitMessage
SetCursorPos
LoadIconW
SetCapture
DrawTextW
GetWindowRect
ReleaseDC
GetParent
CreateWindowExW
GetClassNameW
DialogBoxParamW
GetWindowTextW
SetLayeredWindowAttributes
gdi32
SetBkMode
DeleteDC
GetObjectW
SetMapMode
SetDIBits
GetMapMode
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
GetClipBox
DPtoLP
advapi32
StartServiceW
RegCloseKey
GetUserNameW
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE