Static task
static1
Behavioral task
behavioral1
Sample
0f741ffaca98ededfcef5962c4ab35be.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f741ffaca98ededfcef5962c4ab35be.exe
Resource
win10v2004-20231215-en
General
-
Target
0f741ffaca98ededfcef5962c4ab35be
-
Size
138KB
-
MD5
0f741ffaca98ededfcef5962c4ab35be
-
SHA1
fce3c530ef7cbef5bf39e42bdec5dd8722914cca
-
SHA256
878ba507e73b169f5663d1c17c400101828f2c8b2a5f4c79aeffb1ecd2495bc1
-
SHA512
f413a145b22d2ed65c29c5220533ef35aa10fa89a4a3f4fdb7c5a23071f9ba2ab1a0ffd7ad5b31c0b84e2cfe8c220d61f5f9c030985b507c231fac2884077ffb
-
SSDEEP
1536:F5mFO5xBHs3nqQhhNUPZlinS4GhZkUrkeZr87M5Erh8e3q7VoagHJ:+FO9Hs3nqSEPZUGhZkUHOKEF8ea7VoaE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f741ffaca98ededfcef5962c4ab35be
Files
-
0f741ffaca98ededfcef5962c4ab35be.exe windows:4 windows x86 arch:x86
db5c7c68e51475baafbc334b20110b5f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueA
RegQueryValueA
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExW
RegFlushKey
RegDeleteValueW
RegCreateKeyW
RegEnumKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyW
RegCreateKeyExA
RegQueryInfoKeyW
RegQueryValueW
RegEnumValueW
RegQueryInfoKeyA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryInfoKeyW
RegGetKeySecurity
RegOpenKeyA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExW
RegFlushKey
RegGetKeySecurity
RegQueryInfoKeyW
RegCreateKeyExA
RegEnumValueA
RegLoadKeyA
RegDeleteKeyW
RegOpenKeyA
RegCreateKeyExW
RegReplaceKeyW
RegQueryValueW
RegQueryInfoKeyA
RegCreateKeyW
RegQueryValueA
RegLoadKeyW
RegOpenKeyExW
RegEnumKeyExW
user32
GetDlgItem
GetCursor
BlockInput
DialogBoxParamA
GetWindowTextA
DrawIcon
DrawTextW
LoadCursorA
AppendMenuW
GetMenu
GetFocus
DrawTextA
GetWindowTextLengthA
IsMenu
DialogBoxParamW
CopyImage
AppendMenuA
CreateIcon
CalcMenuBar
EndDialog
AppendMenuW
AlignRects
IsMenu
LoadMenuA
DialogBoxParamA
BlockInput
GetWindowTextLengthA
GetDC
CopyImage
LoadCursorA
IsWindow
GetFocus
CloseWindow
DrawIconEx
GetWindowTextA
InsertMenuA
GetMenu
GetWindowTextA
CreateIcon
EndDialog
DrawTextW
DrawIcon
CopyImage
GetCursor
CopyRect
GetFocus
GetDlgItem
GetMenu
GetCursor
AppendMenuW
CalcMenuBar
DialogBoxParamA
InsertMenuA
LoadCursorA
IsWindow
BlockInput
GetWindowTextLengthA
comctl32
ImageList_GetImageRect
ImageList_Copy
ImageList_Replace
ImageList_DragMove
ImageList_GetDragImage
ImageList_AddMasked
ImageList_GetIconSize
InitCommonControls
ImageList_AddIcon
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Remove
ImageList_Destroy
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_EndDrag
InitCommonControls
ImageList_Remove
ImageList_GetImageInfo
ImageList_Merge
ImageList_Create
ImageList_AddMasked
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_Copy
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ