Static task
static1
Behavioral task
behavioral1
Sample
119be54d18c417a151f1dd2d4291a1c7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
119be54d18c417a151f1dd2d4291a1c7.exe
Resource
win10v2004-20231222-en
General
-
Target
119be54d18c417a151f1dd2d4291a1c7
-
Size
92KB
-
MD5
119be54d18c417a151f1dd2d4291a1c7
-
SHA1
d66dfb4bc1f1e16c9154b1b2f871891e4180a672
-
SHA256
44a0c6ab4fb530b6cce30d50ae434aaa00dd8e31bc932a0b6a2ef6a543fb1073
-
SHA512
646b996a8ddb503ee2e6ac33e0021e3b438ce74c8e2940f2803fef54b8bf2ce195a93c2621032d2d826dc9dc7bacc9e616326981b5250216be1a7dbdf6070d82
-
SSDEEP
1536:hYMlLMlIoWQon2vPFam/LjEVT+7dQo+WCJk:hYWoIoWQU23Fb/Ms7Oot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 119be54d18c417a151f1dd2d4291a1c7
Files
-
119be54d18c417a151f1dd2d4291a1c7.exe windows:4 windows x86 arch:x86
7c24f3afd57b20a73ea8ebaf589c9516
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetMenu
CopyRect
DrawIcon
CreateIcon
CopyIcon
GetDlgItem
LoadCursorA
GetWindowTextLengthA
GetCursor
EndDialog
DrawIconEx
DrawTextA
CloseWindow
kernel32
SetLastError
ReadConsoleA
DeleteFileW
DeleteFileA
WriteFile
CreateThread
FindAtomA
FindFirstFileA
GetFileTime
GetCommandLineA
GetComputerNameA
OpenFileMappingA
CreateProcessA
OpenFile
DeleteAtom
GetCPInfo
GetLastError
GetFileSize
GetConsoleMode
ExitThread
ReadFile
GlobalFree
GetStdHandle
comctl32
ImageList_LoadImageW
DrawStatusText
ImageList_DragEnter
ImageList_GetIcon
ImageList_LoadImageA
DllGetVersion
ImageList_Add
CreateMappedBitmap
MenuHelp
ImageList_GetIconSize
ImageList_Create
CreateToolbar
CreateStatusWindowW
ImageList_Draw
CreateToolbarEx
InitCommonControls
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 41KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 28B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ