Static task
static1
Behavioral task
behavioral1
Sample
0a77b6ee7040dbed6d5e6554784340f9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a77b6ee7040dbed6d5e6554784340f9.exe
Resource
win10v2004-20231215-en
General
-
Target
0a77b6ee7040dbed6d5e6554784340f9
-
Size
176KB
-
MD5
0a77b6ee7040dbed6d5e6554784340f9
-
SHA1
3437369e6b75021f57de5527c33ef7b1026e52d6
-
SHA256
2a779238f71233c97d094517326d90fad7ae290db87c5d42c0ddda460f5e7e6d
-
SHA512
349d3ba500292c2156720c2707224a56754dd7594a3f0bf271ea0d0e0949b43a71e9afb5659932dfc91faa8dda6aef87543327ad6f8446efa6a850f13f7353d6
-
SSDEEP
3072:0RrwMT4DF3VeJ/CbU6twFHtkzJuZtRWuAXdVTE:01hKQIb5ahqOWuANVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a77b6ee7040dbed6d5e6554784340f9
Files
-
0a77b6ee7040dbed6d5e6554784340f9.exe windows:4 windows x86 arch:x86
ab53e814e9d0e4555f0a3bd4be234cad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
InterlockedDecrement
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLastError
FlushInstructionCache
GetCurrentProcess
VirtualProtect
GetModuleFileNameW
lstrlenA
FreeResource
VirtualAlloc
VirtualFree
GetCPInfo
HeapSize
Sleep
SetLastError
FlushFileBuffers
CreateFileA
GetSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetFileAttributesW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
InitializeCriticalSection
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
OutputDebugStringW
WriteFile
SetFilePointer
CreateFileW
CloseHandle
CreateMutexW
ReleaseMutex
WaitForSingleObject
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
InterlockedIncrement
TlsFree
TlsSetValue
MultiByteToWideChar
WideCharToMultiByte
LocalFree
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
GetACP
user32
LoadStringW
LoadImageW
DispatchMessageW
TranslateMessage
GetMessageW
DefDlgProcW
GetDesktopWindow
IsDialogMessageW
EndDialog
ShowWindow
BringWindowToTop
SetWindowPos
MessageBoxW
SetTimer
GetSysColor
PostMessageW
SetDlgItemTextW
SystemParametersInfoW
SendDlgItemMessageW
MoveWindow
GetWindowRect
GetClassNameW
GetDlgCtrlID
GetWindow
MapWindowPoints
GetClientRect
CreateWindowExW
CallWindowProcW
SetWindowLongW
GetWindowLongW
DefWindowProcW
EndPaint
BeginPaint
SendMessageW
GetDlgItem
RegisterClassW
LoadCursorW
GetSysColorBrush
GetParent
gdi32
SetBkColor
CreateFontIndirectW
DeleteObject
SetTextColor
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
ShellExecuteW
ole32
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
OleInitialize
oleaut32
SysFreeString
SysAllocString
GetErrorInfo
VariantClear
comctl32
InitCommonControlsEx
PropertySheetW
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ