Static task
static1
Behavioral task
behavioral1
Sample
03a619eb059e64fe9fabf3b040ff9c7e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03a619eb059e64fe9fabf3b040ff9c7e.exe
Resource
win10v2004-20231215-en
General
-
Target
03a619eb059e64fe9fabf3b040ff9c7e
-
Size
60KB
-
MD5
03a619eb059e64fe9fabf3b040ff9c7e
-
SHA1
3de0c298db6a3bad8f5402eab23a6acfa2774d8a
-
SHA256
695042b0ff3b40f0681e13179c3fa666b1e14448c39d52c775700f9a92583f0f
-
SHA512
3d4a350733726ecc467596be4f88760142355d6ebdbfe1d945417a592efd4b9783412c0208c3484fdaeda2d31e99a6c65ee650fe2a4e6dab30d9a50d8978987a
-
SSDEEP
768:I++1bYHKDE0zLvBoSDtFJEVydlbEXZsUUNRmFBv7mYYSIq+lgOmOVsOXUcs:H+1cHsEQyaTlwXqNMvK3Sz+lKGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a619eb059e64fe9fabf3b040ff9c7e
Files
-
03a619eb059e64fe9fabf3b040ff9c7e.exe windows:4 windows x86 arch:x86
3b482786665ad7da7016fbec6f580729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LoadLibraryA
Sleep
GlobalUnlock
CancelWaitableTimer
GetProcAddress
LoadLibraryW
WideCharToMultiByte
SizeofResource
ReadProcessMemory
CreateProcessW
WaitForMultipleObjects
FreeResource
GetDriveTypeW
GetCurrentThreadId
MultiByteToWideChar
FindClose
CreateFileW
FindNextFileW
InterlockedIncrement
DeleteFileW
GetTickCount
user32
LoadImageW
SetCapture
TrackPopupMenu
IsDlgButtonChecked
LoadCursorW
GetWindowDC
PostThreadMessageW
LoadIconW
GetMessageW
DefWindowProcW
SystemParametersInfoW
CreateWindowExW
SetForegroundWindow
IsWindow
GetSysColor
RedrawWindow
LoadStringW
ReleaseDC
DispatchMessageW
gdi32
GetStockObject
DeleteObject
DeleteDC
StretchBlt
CreateSolidBrush
GetDeviceCaps
SetTextColor
BitBlt
CreateRoundRectRgn
advapi32
GetUserNameW
RegCreateKeyExW
RegNotifyChangeKeyValue
LookupAccountSidW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE