Static task
static1
Behavioral task
behavioral1
Sample
1317de43b97a04a32e8c6c60d427cd9d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1317de43b97a04a32e8c6c60d427cd9d.exe
Resource
win10v2004-20231215-en
General
-
Target
1317de43b97a04a32e8c6c60d427cd9d
-
Size
74KB
-
MD5
1317de43b97a04a32e8c6c60d427cd9d
-
SHA1
5ffb3ce2e9109ef6f9e2539893e58e8f5f8e30e3
-
SHA256
e82a363af3c8bdfc4f13e0ea07c0a506b5a9efb5414ac5337fba12ddc6993299
-
SHA512
3821daa0a8148f82619c334480f1319009c5d6f1869431fc67be8f1728e583efd8e33e3a657c0f724477276d2a776b1957380612676ea252ea0e6115a84060e6
-
SSDEEP
1536:YO04IrfTTSUo3A1HQtmVyZK49iFstepVLtE2tPXVAHmR/P:YOCziA4mVyZK48FTLthQHml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1317de43b97a04a32e8c6c60d427cd9d
Files
-
1317de43b97a04a32e8c6c60d427cd9d.exe windows:1 windows x86 arch:x86
c357cea54ce73a28eed56b70ff043b00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
LineTo
MoveToEx
RealizePalette
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
user32
BeginPaint
CheckMenuItem
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawTextA
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItemTextA
GetMenu
GetMessageA
GetSysColor
GetSystemMetrics
GetWindowRect
InvalidateRect
IsDialogMessageA
IsIconic
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassA
SetDlgItemTextA
SetFocus
SetTimer
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
Sleep
_lclose
_lcreat
_lopen
_lread
_lwrite
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.WYCao Size: 8KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ