Static task
static1
Behavioral task
behavioral1
Sample
140069c49e5ba7baae71945d246f75da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
140069c49e5ba7baae71945d246f75da.exe
Resource
win10v2004-20231215-en
General
-
Target
140069c49e5ba7baae71945d246f75da
-
Size
68KB
-
MD5
140069c49e5ba7baae71945d246f75da
-
SHA1
de1860dc5d3eb1691023ce35c9945be667433e2e
-
SHA256
0e69e356efb7e3349850ab52efc3759abdf3fc75790a8573abd474d4d35fc480
-
SHA512
c0a305bda27b7a76667666eabaf632c23a1eef38fd5965c0229796545e80eafa08c5db07cb411f44ee923e935d05224163b2f044fb516fe36044758c11b46576
-
SSDEEP
1536:0om9Xp7pdGaeMIbSPVCY+8WvN8Yu45hpW6sOSTkWPbvxEU:gXjd2MIbSC8Wvao5hpWghwlx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140069c49e5ba7baae71945d246f75da
Files
-
140069c49e5ba7baae71945d246f75da.exe windows:4 windows x86 arch:x86
528457272b5e59502376a230411b0ffe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BackupSeek
BackupWrite
CloseHandle
CreateTapePartition
DeleteFileW
ExitProcess
FindFirstChangeNotificationW
FoldStringA
GetConsoleOutputCP
GetDiskFreeSpaceExW
GetFileAttributesW
GetPrivateProfileStructA
GlobalFindAtomA
GlobalMemoryStatus
InterlockedExchangeAdd
Module32First
OpenEventA
OpenEventW
SetProcessAffinityMask
SetSystemPowerState
SetTimeZoneInformation
VerLanguageNameW
WriteConsoleOutputCharacterA
WriteProfileStringW
lstrcpyn
user32
AdjustWindowRect
ChangeClipboardChain
ChangeDisplaySettingsExW
CharToOemW
ClientToScreen
CloseWindow
DdeReconnect
DefWindowProcA
DialogBoxParamA
EnumDisplayDevicesA
GetKeyNameTextW
GetKeyboardType
InsertMenuW
IntersectRect
IsCharAlphaA
IsCharUpperA
OemKeyScan
SetCursor
SetDebugErrorLevel
SetWindowsHookExA
gdi32
BeginPath
ChoosePixelFormat
ColorMatchToTarget
CopyEnhMetaFileW
CreateColorSpaceA
CreateEllipticRgn
CreateFontW
CreateRectRgn
DPtoLP
DeleteMetaFile
EnumMetaFile
GetCharABCWidthsFloatW
GetCharWidthFloatW
GetOutlineTextMetricsW
GetROP2
GetTextColor
IntersectClipRect
ModifyWorldTransform
PolyBezier
PtInRegion
RestoreDC
SetBoundsRect
SetFontEnumeration
SetPaletteEntries
SetStretchBltMode
StartDocA
UpdateColors
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ