Static task
static1
Behavioral task
behavioral1
Sample
10538f1a7d8f4f658ef987b9b18ae698.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10538f1a7d8f4f658ef987b9b18ae698.exe
Resource
win10v2004-20231215-en
General
-
Target
10538f1a7d8f4f658ef987b9b18ae698
-
Size
244KB
-
MD5
10538f1a7d8f4f658ef987b9b18ae698
-
SHA1
78755dd9eb7b5314b06e7c4c6e2e14c599e01ae5
-
SHA256
395ec4b5723dbd5c6f4c120247fedb5287d9316f9e2ec7649510c03a75605ee1
-
SHA512
cde51cb4bbba3a3f1c34a41f3f62a102e6ac77f54974d73603034c480cc487a0d4e4c76295d907bffbcfc2f9e2db830e259d1a6154429f8dd6357d11b0c59124
-
SSDEEP
6144:xnhWsJp3zblWSMnAaAqe1TvB8cz7dmqU:1pvDblWHnfAz17CqU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10538f1a7d8f4f658ef987b9b18ae698
Files
-
10538f1a7d8f4f658ef987b9b18ae698.exe windows:4 windows x86 arch:x86
13f14559ad96e9c76a503b38d19dc5e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
FreeResource
FindNextChangeNotification
GetDateFormatW
SetConsoleOutputCP
GetNumberFormatA
GetFileSize
BeginUpdateResourceW
user32
GetDlgItemInt
IsWindowVisible
CallMsgFilterA
gdi32
Escape
DPtoLP
GetTextAlign
AnimatePalette
GetGlyphOutlineW
EnumFontFamiliesExA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE