Static task
static1
Behavioral task
behavioral1
Sample
1787b69c2ac0a33ab0f53ee11f7a80cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1787b69c2ac0a33ab0f53ee11f7a80cb.exe
Resource
win10v2004-20231215-en
General
-
Target
1787b69c2ac0a33ab0f53ee11f7a80cb
-
Size
332KB
-
MD5
1787b69c2ac0a33ab0f53ee11f7a80cb
-
SHA1
90c2d1a81343a0f7bb7635e74e1f1882ab2d23ef
-
SHA256
1bd6c34e2cc875fdb3a7233499510434ea0bb98d577cbe913d90946f12438707
-
SHA512
362514f0d712ecc95488906e0a5e62988a2d8f08903288288f16469901c33ed498d59bf1781615b0e5b86213ada09fda20f400a3c89cd04142408740fc240f11
-
SSDEEP
3072:XXIr4MpfSi+oo0QU/3pKAgMULG2/zfY0u:Icriy0QU/3pKdB/zfE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1787b69c2ac0a33ab0f53ee11f7a80cb
Files
-
1787b69c2ac0a33ab0f53ee11f7a80cb.exe windows:4 windows x86 arch:x86
d827fbe915692acf9f30b399bbc38ccf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
lstrcpynA
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapAlloc
LocalAlloc
DeleteFileA
MultiByteToWideChar
UnmapViewOfFile
GetCommandLineA
GetTempPathA
CreateFileMappingA
MapViewOfFile
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpA
FindResourceA
SizeofResource
LoadResource
LockResource
SystemTimeToFileTime
SetFileTime
WriteFile
ReadFile
GetVersionExA
lstrcatA
CreateFileA
CloseHandle
lstrcpyA
GetEnvironmentStrings
lstrlenA
GetStringTypeW
user32
ClientToScreen
CreateDialogIndirectParamA
SetWindowTextA
DrawTextExA
SetRect
GetDlgItemTextA
GetMessageTime
InvertRect
SetWindowRgn
MoveWindow
SetActiveWindow
GetWindow
MessageBeep
GetDesktopWindow
RegisterClassA
UnregisterClassA
ModifyMenuA
DestroyMenu
TrackPopupMenu
AppendMenuA
GetSubMenu
LoadMenuA
CheckDlgButton
EnableWindow
CheckRadioButton
SetCursor
SetWindowPos
WinHelpA
GetSystemMetrics
DefWindowProcA
EndDialog
SetFocus
LoadBitmapA
CopyRect
DrawEdge
GetSysColorBrush
DrawStateA
OffsetRect
UnregisterHotKey
DestroyWindow
PostQuitMessage
LoadCursorA
CharUpperA
GetDlgItem
SetWindowLongA
GetWindowLongA
FindWindowA
SetForegroundWindow
PostMessageA
GetForegroundWindow
CreateWindowExA
RegisterHotKey
GetWindowRect
GetDialogBaseUnits
SetDlgItemTextA
CallWindowProcA
EndPaint
GetSysColor
LoadImageA
DialogBoxParamA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
ShowWindow
GetDC
ReleaseDC
InflateRect
DrawIconEx
GetCursorPos
ScreenToClient
PtInRect
ReleaseCapture
GetCapture
SetCapture
InvalidateRect
LoadIconA
MessageBoxA
wsprintfA
FillRect
DrawTextA
BeginPaint
GetClientRect
SendMessageA
gdi32
AddFontResourceA
EnumFontFamiliesA
SetBkColor
GetBkColor
DeleteDC
CreateSolidBrush
CreateCompatibleDC
GetObjectA
GetTextExtentPoint32A
CreatePolygonRgn
CreateFontIndirectA
SetBkMode
SetTextColor
CreatePen
SelectObject
MoveToEx
BitBlt
DeleteObject
LineTo
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoCreateInstance
CoInitialize
comctl32
ord17
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ifc Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE