Static task
static1
Behavioral task
behavioral1
Sample
12d5f03ecc90d968259be955b74b34ed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12d5f03ecc90d968259be955b74b34ed.exe
Resource
win10v2004-20231215-en
General
-
Target
12d5f03ecc90d968259be955b74b34ed
-
Size
65KB
-
MD5
12d5f03ecc90d968259be955b74b34ed
-
SHA1
26ad8e3b827a392c86ccd0084831273214f8dffa
-
SHA256
51611a7321168056c9282e435cf9cc936aecb15c1fd92d1fcb3be1650fc30f4d
-
SHA512
97cee1ec4b8959a34a1b9aa82d6d03adad9bf7f048ab12c41619b22fde4522f67f7a3456ce24191f710c05b83c11bbca40af767eb8463e281a031eb966c11090
-
SSDEEP
1536:ijf1C8VgcKsAnuW6geKuwPmz5555555555555AZ6LrJyNchXDvU:mfxKcKsAnuWxqwmz5555555555555AYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12d5f03ecc90d968259be955b74b34ed
Files
-
12d5f03ecc90d968259be955b74b34ed.exe windows:4 windows x86 arch:x86
1ca15d1722516b012ae7b5c2ed97e70e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
TlsGetValue
CloseHandle
SetLastError
HeapCreate
ReleaseMutex
GetModuleHandleA
LoadLibraryExA
GetProcessHeap
CreateFileA
GetExitCodeProcess
lstrlenW
TlsAlloc
FindResourceA
GetCurrentThreadId
CreateMutexA
DeleteAtom
GetStdHandle
GetEnvironmentVariableA
user32
DispatchMessageA
DrawEdge
CheckRadioButton
CreateWindowExA
GetDlgItem
GetDC
CreateMenu
FillRect
SetFocus
IsWindow
DrawMenuBar
GetCaretPos
CallWindowProcA
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPHashData
CPDecrypt
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mcjxsey Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE