Static task
static1
Behavioral task
behavioral1
Sample
1a5a608d49ea022bba7ebc885d9d1e27.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a5a608d49ea022bba7ebc885d9d1e27.exe
Resource
win10v2004-20231215-en
General
-
Target
1a5a608d49ea022bba7ebc885d9d1e27
-
Size
66KB
-
MD5
1a5a608d49ea022bba7ebc885d9d1e27
-
SHA1
683f19719fb50e5a5211079d068c5c13a12424ed
-
SHA256
78f913d24f6cb83cf4f6d149fb84765a1a52dabc44c2d75e1c5ab5cbb7c330ce
-
SHA512
6b53a324eae70cdb3076a89af2a71145638d8cf9110bd3350baeb8279d5668385380e9afc5ea53f0336f815418eebad3b2568a1eabcf6a2e89ab48b6dae830e7
-
SSDEEP
768:DLm32oAzcrdKWx7kG/Un+eysKZaNbeKQke3L8SHqkcr0:9oUcSpn+eCaNyKF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5a608d49ea022bba7ebc885d9d1e27
Files
-
1a5a608d49ea022bba7ebc885d9d1e27.exe windows:5 windows x86 arch:x86
c24821f76b54e90e2a4a788d5c749592
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetMenu
GetMessageW
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
InvalidateRect
IsCharAlphaW
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsZoomed
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadStringW
GetKeyState
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
wsprintfW
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDC
GetClipboardData
GetClientRect
FrameRect
FillRect
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawMenuBar
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CallWindowProcW
CallNextHookEx
BeginPaint
MessageBoxW
gdi32
ExtTextOutW
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
Escape
DeleteObject
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
BitBlt
comdlg32
CommDlgExtendedError
FindTextW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
ChooseFontW
msvcrt
abs
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss1 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss2 Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ