Static task
static1
Behavioral task
behavioral1
Sample
0075a365ca0ae56b2dfc8c681d8125bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0075a365ca0ae56b2dfc8c681d8125bd.exe
Resource
win10v2004-20231215-en
General
-
Target
0075a365ca0ae56b2dfc8c681d8125bd
-
Size
153KB
-
MD5
0075a365ca0ae56b2dfc8c681d8125bd
-
SHA1
a288fa304ecacfdbf22cc9b2e6fa272e0cbc392e
-
SHA256
4c504bcaf8990af8596b7e7ea064a955612e4bda078425083313ffa28b498015
-
SHA512
a4b115381f06db1716b178eb03c9fbff502e406820821bb9477b7afe2a71ecbda2f177e713748d4484b362164c8332b5f9748cf214d16325b3038f74808ec858
-
SSDEEP
3072:fLxGORFGRSA4V89k97xKsiuQitu1aQCYvFUwmt1:JRFGRg97xqqeCa6wG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0075a365ca0ae56b2dfc8c681d8125bd
Files
-
0075a365ca0ae56b2dfc8c681d8125bd.exe windows:5 windows x86 arch:x86
2c32c847771e23b4153116ed838a3234
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
lstrcpynA
HeapAlloc
HeapFree
GetProcessHeap
GetVolumeInformationA
GetModuleHandleA
lstrcpyA
FindResourceA
lstrcmpA
lstrlenA
LoadResource
SizeofResource
GetProcAddress
VirtualAlloc
LoadLibraryA
LockResource
VirtualProtect
user32
LoadCursorA
DispatchMessageA
DefWindowProcA
CreateWindowExA
GetWindowLongA
TranslateMessage
LoadIconA
RegisterClassExA
GetMessageA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ