Static task
static1
Behavioral task
behavioral1
Sample
152fc7055cc8adf74a301abf44453b98.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
152fc7055cc8adf74a301abf44453b98.exe
Resource
win10v2004-20231215-en
General
-
Target
152fc7055cc8adf74a301abf44453b98
-
Size
356KB
-
MD5
152fc7055cc8adf74a301abf44453b98
-
SHA1
7a0b63923e353e84ea75c04a0363d8c84ceb0c20
-
SHA256
389921d3cc3b1c89f72d25dad7d45448bc52ea1c4224fa36cd88fe9edfd754ad
-
SHA512
15ef376e74042862cb6d18c84271831abcc28be26b862f6dad51c073e416f45cf0fbd4ccc59a4e97832d586d48dc35b58296b689ff6f496e9abe8946820d308e
-
SSDEEP
6144:SgcFDpBKFySotdkmU49r9Ohm3N1rnFOa7pLwlvYyqyWdovcO/TR+A:SgKf0otdkmVji61rnwa71cvpWUcOrR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152fc7055cc8adf74a301abf44453b98
Files
-
152fc7055cc8adf74a301abf44453b98.exe windows:4 windows x86 arch:x86
54092356b6b4737e0a3a4b32e4e0487f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
comdlg32
GetOpenFileNameA
Sections
CODE Size: 346KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE