Static task
static1
Behavioral task
behavioral1
Sample
12e93193aaf7001f7ae5a5580b7d5f53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12e93193aaf7001f7ae5a5580b7d5f53.exe
Resource
win10v2004-20231215-en
General
-
Target
12e93193aaf7001f7ae5a5580b7d5f53
-
Size
243KB
-
MD5
12e93193aaf7001f7ae5a5580b7d5f53
-
SHA1
144c9d27d7e8d8ad0b4518f2a6be1400e573f8b9
-
SHA256
61b8f6c8bd1adfda276a762d05296d37fbbab6d905613772224777e02c87d527
-
SHA512
dda26f797917fe30ec9c36409dea6890fd5bac206c3fd144df18dbcb6352f14e15bfdc177763103247008b4e068613c47849006441002a44dda226a4ecc54055
-
SSDEEP
6144:wr24x81/E7AjoL5GWuSZ+16UGL1AVMU9mU4:wr78cAYzwGL1AV99h4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e93193aaf7001f7ae5a5580b7d5f53
Files
-
12e93193aaf7001f7ae5a5580b7d5f53.exe windows:4 windows x86 arch:x86
24e7639c9e25c97d50ded6c79f769257
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
CreateWindowExW
InvalidateRgn
PostMessageW
UpdateWindow
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
kernel32
GetCurrentDirectoryA
SetUnhandledExceptionFilter
QueryPerformanceCounter
CreateFileA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
oleaut32
DispGetIDsOfNames
OleLoadPicture
QueryPathOfRegTypeLib
GetErrorInfo
SetErrorInfo
VariantClear
OleLoadPictureEx
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
shlwapi
PathFindExtensionA
Sections
.text Size: 146KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ