Static task
static1
Behavioral task
behavioral1
Sample
0007769abe33d86241803b8d406bf7ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0007769abe33d86241803b8d406bf7ec.exe
Resource
win10v2004-20231222-en
General
-
Target
0007769abe33d86241803b8d406bf7ec
-
Size
60KB
-
MD5
0007769abe33d86241803b8d406bf7ec
-
SHA1
91043345c325c399512526d2747930ae26060868
-
SHA256
fca37947dead6e48532b221ceee3ce793648f2f8d628e53c0e083ce7a5728a94
-
SHA512
beca1fb0c2fe230ae70a95a2b37523a79ecc6c43b17507d0bdb174581e966970a6ea7e947fa7061a46a80e440494703fb51bfdfa0e6eaa0940ec3bc6d6f90788
-
SSDEEP
768:c6Q4sFnBNSROBq1LE1HcCWMDc8OHC4OBifHhTZNB8+EqwCwXw2:HmFnnmOBqC18Lqc8mZJTPB8vqwCsw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0007769abe33d86241803b8d406bf7ec
Files
-
0007769abe33d86241803b8d406bf7ec.exe windows:4 windows x86 arch:x86
0e38cf4c60cfdb74b7e2ae0f8c717be3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetPrivateProfileStringW
FindFirstChangeNotificationW
GetLastError
WideCharToMultiByte
SetFilePointer
GetFileAttributesExW
GetTickCount
SetLastError
ResetEvent
TerminateThread
CreateEventW
FindResourceExW
GetFileAttributesW
GetSystemTime
GetModuleHandleW
LoadResource
Sleep
GetProcAddress
LoadLibraryA
user32
SetLayeredWindowAttributes
FillRect
DialogBoxParamW
LoadIconW
GetKeyState
SetWindowTextW
GetCursorPos
TrackPopupMenu
LoadImageW
RedrawWindow
LoadBitmapW
ReleaseCapture
TranslateMessage
SetCapture
SendDlgItemMessageW
GetSystemMetrics
RegisterWindowMessageW
GetMessageW
VkKeyScanW
SystemParametersInfoW
GetParent
SetForegroundWindow
GetClassNameW
EnableWindow
gdi32
Rectangle
CreateSolidBrush
SetBkColor
CreateICW
CreateBitmap
BitBlt
GetObjectW
DeleteDC
DPtoLP
CreateFontIndirectW
advapi32
InitializeSecurityDescriptor
LookupPrivilegeValueW
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE