Static task
static1
Behavioral task
behavioral1
Sample
14a92773d23373774c63d32af812a264.exe
Resource
win7-20231129-en
General
-
Target
14a92773d23373774c63d32af812a264
-
Size
276KB
-
MD5
14a92773d23373774c63d32af812a264
-
SHA1
f9c5713dd6c3be3a71842566fcda52b941c4728d
-
SHA256
4705ec02586b48c1842920c12dcdba1fd911feb40b3ef23cf253971aa8acc013
-
SHA512
cb402ec4069587ce8e9a0265be9e21dd6c18ad9048b00c9698ce369668a9a716455b6d0fd3bacfbd95cd0636371a37a3a530c98a1494b927c2ace90c73958547
-
SSDEEP
6144:5vPOcczKy9w9Tn2vGfA+YDETkOHu3gbVQhv2g6a0FzDCs7vBXk:jcz9MLoGo+YDuksDYyzGsLBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a92773d23373774c63d32af812a264
Files
-
14a92773d23373774c63d32af812a264.exe windows:4 windows x86 arch:x86
0f186b88350741cdc370e181eadd3771
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetLastError
InterlockedExchange
GlobalAddAtomW
GetProcessHeap
GetCurrentDirectoryW
LoadResource
EnumResourceNamesW
EnumResourceTypesW
HeapAlloc
SizeofResource
FindFirstFileW
GetProcAddress
LocalFree
RaiseException
GlobalFree
EnumResourceLanguagesW
EnumResourceNamesA
LockResource
GetModuleHandleW
GetCommandLineW
CloseHandle
FindNextFileA
GetDateFormatA
FindResourceExW
LoadLibraryA
MultiByteToWideChar
FormatMessageW
SetLastError
FindFirstFileA
HeapFree
Sleep
user32
CharNextA
wsprintfW
GetMessageA
LoadStringA
IsWindowVisible
PostThreadMessageA
CharUpperA
DispatchMessageA
GetWindowThreadProcessId
GetWindowTextA
PeekMessageA
EnumWindows
SetTimer
KillTimer
MessageBoxA
wsprintfA
Sections
.text Size: 145KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ