Static task
static1
Behavioral task
behavioral1
Sample
12defd00e316ee95b453910fb9f810ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12defd00e316ee95b453910fb9f810ba.exe
Resource
win10v2004-20231215-en
General
-
Target
12defd00e316ee95b453910fb9f810ba
-
Size
352KB
-
MD5
12defd00e316ee95b453910fb9f810ba
-
SHA1
ad89209cdccd7b4cbe1c567104b8098ce94a1ef2
-
SHA256
5d743083caf6aa40dbf76299cfca2599a519b84cbe874aed9d9726f5c8accaee
-
SHA512
c4940f056358c0e47d9582774e259ef02924bd2b361087da97f322bbe941dfffffb5aba75b46e594b7cc21ea81e295c9be6ff5f89e836a782b74ad8130b7733a
-
SSDEEP
6144:xmNC0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nO9qxzSiUY:xkC08N5qAWgko8wR54aN7mwsSGqx26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12defd00e316ee95b453910fb9f810ba
Files
-
12defd00e316ee95b453910fb9f810ba.exe windows:4 windows x86 arch:x86
15a640f0978f410e29cc3e27db8e3151
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
OpenMutexA
FreeConsole
GetACP
GetConsoleTitleW
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
OpenMutexA
GetModuleHandleA
LocalFlags
LoadLibraryExW
user32
GetKeyState
GetSubMenu
ClipCursor
GetParent
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA
uxtheme
EnableTheming
CloseThemeData
GetCurrentThemeName
DrawThemeText
DrawThemeBackground
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ