Static task
static1
Behavioral task
behavioral1
Sample
108374d9987538d75db16153fbc46dc2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
108374d9987538d75db16153fbc46dc2.exe
Resource
win10v2004-20231215-en
General
-
Target
108374d9987538d75db16153fbc46dc2
-
Size
156KB
-
MD5
108374d9987538d75db16153fbc46dc2
-
SHA1
b6b2782646661a42858838c90d7c546c868238b8
-
SHA256
d471bd740687a929128b4487642a4a562fab67bb6ccb9f56f95b5d23116eef63
-
SHA512
494a7167dba9b47277ee6aa7d7a9270dd2ef402f52da15e229a55f019d22393f54b89125360e61d02b9c3ce1d0233f7a2773a6274b20a40b02f6ff00d417a0f4
-
SSDEEP
3072:AgMcml0dvQ1hiH0VFo/UHAaHgjCEzdPlzFHWgygN0eHVK8/ULxPo2558F:ycmlkvQ1htFu7aHgjz9lzFHWgjN35M1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 108374d9987538d75db16153fbc46dc2
Files
-
108374d9987538d75db16153fbc46dc2.exe windows:4 windows x86 arch:x86
e9210ae66db1870efb13ff5d4a1b5aad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetModuleHandleA
SetConsoleCP
HeapCreate
GetCurrentProcessId
GetACP
GetCurrentThread
HeapAlloc
GetFileAttributesA
GetVersion
GetFullPathNameW
RaiseException
GetVersionExA
SetStdHandle
SetLastError
LocalFileTimeToFileTime
InterlockedCompareExchange
ExitProcess
UnhandledExceptionFilter
Sleep
GetOEMCP
TlsSetValue
FreeEnvironmentStringsA
GetCommandLineW
lstrcpyW
VirtualProtect
msvcrt
_lock
_CxxThrowException
__p__commode
??0exception@@QAE@XZ
user32
GetActiveWindow
GetLastActivePopup
DestroyWindow
DrawTextW
GetMenuState
RegisterWindowMessageA
RegisterClassExW
GetClientRect
ole32
StgSetTimes
gdi32
CreateCompatibleDC
advapi32
RegCreateKeyExW
RegOpenKeyExW
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ