Static task
static1
Behavioral task
behavioral1
Sample
1d76c46d4f5155508c74671e28b2368b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1d76c46d4f5155508c74671e28b2368b.exe
Resource
win10v2004-20231215-en
General
-
Target
1d76c46d4f5155508c74671e28b2368b
-
Size
580KB
-
MD5
1d76c46d4f5155508c74671e28b2368b
-
SHA1
a3957317da8aff097792156e0c5f6f4147136ad0
-
SHA256
8804710060006b48a941aac5e9cef9a1e917b522947769901cf798e17913c65b
-
SHA512
ccdb6542c804f77a845156d127ef5b67b41f985eb40f06b4cc822aee3f96f6d59e0c0cb38fa543a8c1c7f39ad4b9f1b190f1ff90f021b215c1bf3c96862b2fce
-
SSDEEP
6144:rXPOYDHrrkB+fRYAM7hARVM0eNZwiLC/zSWGJS76y36ZcjypxCJbDd6WRAv:rfvrU2RYAMeVMNN6/KS761ZcjsebgWR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d76c46d4f5155508c74671e28b2368b
Files
-
1d76c46d4f5155508c74671e28b2368b.exe windows:4 windows x86 arch:x86
88d73a7065cf7f053736c14a0b943cc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_Duplicate
ImageList_SetIconSize
CreatePropertySheetPage
ImageList_ReplaceIcon
ImageList_Read
ImageList_DrawIndirect
CreateStatusWindowW
CreatePropertySheetPageA
ImageList_AddIcon
ImageList_LoadImageW
ImageList_Add
CreateToolbar
ImageList_GetImageInfo
DestroyPropertySheetPage
DrawStatusTextW
CreateUpDownControl
ImageList_Create
ImageList_DragLeave
InitCommonControlsEx
ImageList_SetDragCursorImage
ImageList_GetBkColor
ImageList_Destroy
ImageList_LoadImage
ImageList_SetFilter
kernel32
GetModuleFileNameA
LCMapStringA
IsBadWritePtr
SetHandleCount
TlsGetValue
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetLastError
GetTickCount
SetStdHandle
MultiByteToWideChar
VirtualAlloc
GetLastError
LCMapStringW
TerminateProcess
ExitThread
FlushFileBuffers
GetStartupInfoA
GetTimeFormatA
HeapCreate
TlsSetValue
OpenMutexA
SetFilePointer
GetOEMCP
GetLocaleInfoW
InterlockedExchange
QueryPerformanceCounter
HeapSize
GetProcAddress
VirtualProtect
EnumSystemLocalesA
HeapFree
GetCommandLineA
HeapReAlloc
GetSystemTimeAsFileTime
GetACP
GetCurrentProcessId
GetLocaleInfoA
TlsAlloc
GetStringTypeW
CloseHandle
TlsFree
GetModuleHandleA
IsValidLocale
WriteFile
GetTimeZoneInformation
FreeEnvironmentStringsW
CreateMutexA
GetCurrentThreadId
ExitProcess
GetEnvironmentStrings
LoadLibraryA
GetFileType
VirtualQuery
GetStdHandle
CompareStringW
InitializeCriticalSection
FreeEnvironmentStringsA
LeaveCriticalSection
IsValidCodePage
DeleteCriticalSection
GetUserDefaultLCID
GetCurrentThread
GetStringTypeA
CompareStringA
ReadFile
HeapAlloc
GetVersionExA
GetSystemInfo
HeapDestroy
GetDateFormatA
EnterCriticalSection
VirtualFree
SetEnvironmentVariableA
GetEnvironmentStringsW
GetCurrentProcess
WideCharToMultiByte
user32
IsCharUpperW
RegisterClassA
RegisterClassExA
DestroyCursor
EnumWindowStationsA
SetWindowLongA
EndDeferWindowPos
CopyAcceleratorTableW
GetWindowContextHelpId
InsertMenuItemW
LookupIconIdFromDirectoryEx
DeferWindowPos
InSendMessageEx
GetWindow
EndMenu
CharNextA
GetNextDlgGroupItem
wvsprintfW
DestroyWindow
GetUserObjectInformationA
RemovePropA
DdeDisconnect
WindowFromPoint
UnhookWindowsHook
LoadMenuW
DefFrameProcW
GetDialogBaseUnits
InsertMenuItemA
FlashWindowEx
MsgWaitForMultipleObjectsEx
SetDlgItemInt
PostThreadMessageA
SetWindowRgn
ShowWindow
MessageBoxA
GetClipboardFormatNameW
EqualRect
MessageBoxW
SetDlgItemTextW
DefWindowProcW
CreateWindowExW
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ