Static task
static1
Behavioral task
behavioral1
Sample
120ae8f0eb4bd3000306677baf65d64c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
120ae8f0eb4bd3000306677baf65d64c.exe
Resource
win10v2004-20231215-en
General
-
Target
120ae8f0eb4bd3000306677baf65d64c
-
Size
271KB
-
MD5
120ae8f0eb4bd3000306677baf65d64c
-
SHA1
ee9425455d109f38c6867adbd1800e5b3bf32ffd
-
SHA256
af84cf07ac7d4c184824f0d7bd90fa1bbaa026e3eb6699e7772ea4f5a061e014
-
SHA512
ff82fcfc445c04fc312fd87f2d056925c240841b014bb9cc71c561ff080d5806259b756ba30bb5c0fc95f0a940be550f795d9d34d0bf063b99f7280fd78beb4c
-
SSDEEP
6144:Nuemb2AikQAkBh2NgnJk73f+7gzyxTf+Cl:3miPlyI273K8ycs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120ae8f0eb4bd3000306677baf65d64c
Files
-
120ae8f0eb4bd3000306677baf65d64c.exe windows:4 windows x86 arch:x86
0ca7762412677273028298064f2e3505
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
FindFirstFileA
FindNextChangeNotification
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibraryAndExitThread
GetBinaryTypeA
GetEnvironmentStringsW
GetModuleFileNameA
GetPrivateProfileSectionNamesA
GetPrivateProfileStructW
GetStringTypeExW
GetSystemInfo
GlobalGetAtomNameW
HeapFree
MoveFileW
OpenWaitableTimerW
PulseEvent
RtlFillMemory
SetCommConfig
SetMessageWaitingIndicator
WritePrivateProfileSectionA
WritePrivateProfileStructW
_lwrite
user32
CallWindowProcA
CheckMenuRadioItem
ChildWindowFromPointEx
CloseDesktop
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateDialogIndirectParamA
DdeAddData
DlgDirListW
DlgDirSelectExA
DrawAnimatedRects
DrawStateA
GetMenuDefaultItem
GetUserObjectInformationA
GetWindowModuleFileNameW
LoadIconW
LookupIconIdFromDirectoryEx
RemovePropW
SendDlgItemMessageA
SendMessageTimeoutW
gdi32
AbortDoc
Arc
CopyEnhMetaFileW
CreateCompatibleDC
CreateEnhMetaFileW
CreateHatchBrush
CreateICA
CreateICW
DeleteColorSpace
EndPage
FillRgn
FloodFill
GdiGetBatchLimit
GetCharWidth32W
GetDIBits
GetEnhMetaFileDescriptionA
GetICMProfileW
GetKerningPairsA
GetRandomRgn
GetRasterizerCaps
GetTextExtentPointA
GetViewportOrgEx
LineDDA
PaintRgn
PlayEnhMetaFileRecord
SetMagicColors
SetTextColor
SetWindowExtEx
TranslateCharsetInfo
WidenPath
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ