?SDOisioKJS@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
0f81c4fb73e0270560a8d23a3211d523.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f81c4fb73e0270560a8d23a3211d523.exe
Resource
win10v2004-20231215-en
General
-
Target
0f81c4fb73e0270560a8d23a3211d523
-
Size
81KB
-
MD5
0f81c4fb73e0270560a8d23a3211d523
-
SHA1
05ea25fc57535cc43d728d826b904fa233aed484
-
SHA256
e787b60dc6b2342b14104aa4fb852e13400eacf611dbbd09e522299f197a9720
-
SHA512
cfe98243e888408124ae0ccffd35eb55ad465285d996bc078c14fbca0708846f1a1eb3a359b3f00dd06eabde06a133f5746e934cd770fa5c20972e9aef137db1
-
SSDEEP
1536:Sou/GFQPy1W41O+oFV7k+v5DoU4HCdELdAQ3QwSGHHh4+GE:Zu/GFwf4Q+U7lELaQgwSGVGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f81c4fb73e0270560a8d23a3211d523
Files
-
0f81c4fb73e0270560a8d23a3211d523.exe windows:5 windows x86 arch:x86
61360bc7fc45f260512ba36bfb6e8db8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
msvcrt
memcpy
ole32
OleIsRunning
gdi32
SetMapMode
GetDIBColorTable
GetNearestPaletteIndex
SetBitmapDimensionEx
GetROP2
BeginPath
GetSystemPaletteUse
CreateRoundRectRgn
PathToRegion
SetBrushOrgEx
SetBkMode
CreateBitmapIndirect
GetTextColor
SetBitmapBits
GetStockObject
TextOutA
GetPixel
user32
CreateCursor
GetClassLongW
GetDialogBaseUnits
GetAltTabInfoW
CreateWindowExA
ScrollWindowEx
CreateMenu
ChangeMenuW
AllowSetForegroundWindow
CharPrevA
GetKeyboardLayout
RegisterClassW
SetCaretPos
LookupIconIdFromDirectory
ShowOwnedPopups
MapVirtualKeyA
AdjustWindowRect
SetScrollRange
UnloadKeyboardLayout
AppendMenuW
CheckDlgButton
InsertMenuW
VkKeyScanW
CharPrevW
OpenDesktopW
wsprintfW
DrawTextW
RegisterWindowMessageA
GetIconInfo
DrawIconEx
DialogBoxIndirectParamA
LoadMenuA
mouse_event
IsRectEmpty
TileWindows
WaitForInputIdle
kernel32
CancelWaitableTimer
FormatMessageW
UnmapViewOfFile
SetErrorMode
CreateWaitableTimerW
IsBadCodePtr
CompareStringA
FindNextChangeNotification
GetTempFileNameW
LCMapStringW
GlobalMemoryStatusEx
GetWindowsDirectoryW
TerminateThread
IsDBCSLeadByte
LoadResource
OpenEventA
GetFileSize
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat_0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_1 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_2 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_3 Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_4 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ