Static task
static1
Behavioral task
behavioral1
Sample
13129d38709ef879ecbb0ddeee777903.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13129d38709ef879ecbb0ddeee777903.exe
Resource
win10v2004-20231215-en
General
-
Target
13129d38709ef879ecbb0ddeee777903
-
Size
636KB
-
MD5
13129d38709ef879ecbb0ddeee777903
-
SHA1
15fe7fe45036c67c5ea2f98eadbe257a441ec353
-
SHA256
01f0fcc67df88551dbcdcf1406dcaf6f4f13e3d3be1876bd892466d2c5ab322f
-
SHA512
10f5908df1627ee2b57fa511f139af20fb219d18c6ce22645dae947b3ad1216d0869f18cc8a96f9371531e261669abc658c79e5190e30167a37b38240ae447bc
-
SSDEEP
12288:ykxkB3WHQjD4JIVhFpDT0o63+wiaAslHUX5DeBEhpe6VGb5+cSABkz6:yRUwD4JSFpJ6OwiaXHUqEhQDbETABk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13129d38709ef879ecbb0ddeee777903
Files
-
13129d38709ef879ecbb0ddeee777903.exe windows:4 windows x86 arch:x86
833619375bbfa5f44b869cc4d70013b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
lstrlenA
SuspendThread
GetTickCount
InterlockedExchange
CompareFileTime
GetConsoleCP
SetConsoleCP
VirtualProtect
WaitForMultipleObjects
LoadLibraryExA
HeapReAlloc
GetAtomNameA
CloseHandle
GetModuleHandleA
GlobalUnlock
GetCommandLineA
WaitForSingleObject
GetSystemDefaultLangID
HeapCreate
GetVersion
user32
GetDlgItem
EnableScrollBar
SetScrollInfo
CreateIcon
InsertMenuA
CreateMenu
InvertRect
DispatchMessageA
GetKeyState
FindWindowA
GetKeyboardLayout
SetPropA
SetWindowPos
DragObject
DestroyMenu
DrawCaption
IsDialogMessage
GetCursorInfo
DialogBoxParamA
CopyImage
FillRect
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ