Static task
static1
Behavioral task
behavioral1
Sample
03f4f5a68a9f32e2ea0675a107ba4c06.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03f4f5a68a9f32e2ea0675a107ba4c06.exe
Resource
win10v2004-20231215-en
General
-
Target
03f4f5a68a9f32e2ea0675a107ba4c06
-
Size
44KB
-
MD5
03f4f5a68a9f32e2ea0675a107ba4c06
-
SHA1
92240476b7c862df8e4d2e39d75b30ef9435c647
-
SHA256
76ea80f88248d5583cd2fd64ff89b06d6bc5ca9c45415467f1c2ca5769a887ad
-
SHA512
2adbb7a3ac4d165ca137f58e0272155a1527f04112be89af515128e265a31e20717d45f58990f7debca5ab0ab4f9b23cc9f616855963b9cfbc62e82842332368
-
SSDEEP
768:VQsENcXg3Vu1uq2rbM8pcJC5TOdx2r4cb3En4VYuIj9tektHs9pm2QlJ+c:VQMQF9q2rbMni6jncFYuIjLektwQl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f4f5a68a9f32e2ea0675a107ba4c06
Files
-
03f4f5a68a9f32e2ea0675a107ba4c06.exe windows:4 windows x86 arch:x86
ad952c163c83607a3f3a5fb29ecf84e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
VirtualProtect
SetConsoleTitleA
UnlockFile
GetConsoleTitleW
GetCurrentThreadId
DnsHostnameToComputerNameA
SetConsoleDisplayMode
QueryInformationJobObject
CopyFileW
SetSystemPowerState
GetCurrentDirectoryA
GetFileSizeEx
GetOverlappedResult
TlsFree
EnumCalendarInfoExA
FindFirstVolumeW
VirtualLock
GetLastError
VirtualQueryEx
GetSystemTimeAdjustment
GetConsoleHardwareState
SetTimeZoneInformation
TransactNamedPipe
GlobalUnlock
ExitVDM
GetProcessTimes
ReadConsoleInputW
MultiByteToWideChar
ExpandEnvironmentStringsA
SetDefaultCommConfigA
CreateDirectoryW
GlobalFix
ScrollConsoleScreenBufferW
GlobalUnWire
SetCommMask
user32
GrayStringW
SetMenu
DestroyMenu
RegisterDeviceNotificationW
GetWindowLongA
GetProgmanWindow
GetShellWindow
wsprintfA
CreateDialogIndirectParamA
DrawTextExW
DispatchMessageA
gdi32
PATHOBJ_vGetBounds
GetEnhMetaFileA
GetTextExtentExPointW
GdiFixUpHandle
GdiPrinterThunk
EngDeleteSemaphore
SetICMMode
ColorMatchToTarget
Polygon
GetRelAbs
CreateCompatibleBitmap
GdiConsoleTextOut
STROBJ_bEnum
comdlg32
dwLBSubclass
GetSaveFileNameW
dwOKSubclass
WantArrows
GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameA
PageSetupDlgA
LoadAlterBitmap
PrintDlgExA
Ssync_ANSI_UNICODE_Struct_For_WOW
ChooseColorA
PrintDlgA
Sections
.text Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE