Static task
static1
Behavioral task
behavioral1
Sample
18c92e604571f5bfc543da6b08f63801.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
18c92e604571f5bfc543da6b08f63801.exe
Resource
win10v2004-20231215-en
General
-
Target
18c92e604571f5bfc543da6b08f63801
-
Size
89KB
-
MD5
18c92e604571f5bfc543da6b08f63801
-
SHA1
049b99a795d5f835e3d693d76a6b3c628d186f85
-
SHA256
3bcc8272f9edeaaeb0f9fa420af604b1cfc6b94479ff44ad2b8dd0499daef913
-
SHA512
85c2e7699e66daeaf48586497c693bfc782bc2ed433281957a083e97c5fe9bfc4d5a083a5c9261b576c2d5db94ded027b408cc2a5d40c823874dcbb394b2968c
-
SSDEEP
768:i5YXLn2q8f+Rd4BDMVAaAF8tXID8wx8z+xSSJqM+fHfB68c8giIUq0YM7X:i5Y70NhFSYfsUnof/s8X3q0d7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c92e604571f5bfc543da6b08f63801
Files
-
18c92e604571f5bfc543da6b08f63801.exe windows:4 windows x86 arch:x86
ff967ae5056af53c7e0fb22ea72e255e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
Sleep
ReleaseMutex
TlsGetValue
DeleteCriticalSection
FindClose
GetModuleHandleA
ExitProcess
SetEvent
VirtualProtect
CloseHandle
SearchPathA
GetDiskFreeSpaceA
lstrlenA
CreateThread
FindResourceExA
FindAtomA
GetTickCount
GetCalendarInfoA
GetLastError
user32
CopyImage
CreateWindowExA
DispatchMessageA
GetMessageA
EnableWindow
GetUpdateRect
GetKeyState
DragDetect
GetScrollBarInfo
EndDialog
IsIconic
DialogBoxParamA
CreateMenu
CloseWindow
msdmo
DMOGetName
DMORegister
DMOGetTypes
DMOUnregister
DMOEnum
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nggbizv Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE