Static task
static1
Behavioral task
behavioral1
Sample
0279655817116cdb72efb5d74dd064b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0279655817116cdb72efb5d74dd064b0.exe
Resource
win10v2004-20231222-en
General
-
Target
0279655817116cdb72efb5d74dd064b0
-
Size
49KB
-
MD5
0279655817116cdb72efb5d74dd064b0
-
SHA1
12ed103e507a90b504575d152263198d48c9a787
-
SHA256
f8184f1e0beb640f44a044d3c4260839f5e75e4d6b858095fc3dd9b7b555af5c
-
SHA512
edcc6dcf21290f8917e687c32f65e0abff81d8cf3e316bd273efb0c97dca25804c586a0a5a683e9d94bf59050d4c8ce5ed683bab8f74be7327b35fa2ddfa08a8
-
SSDEEP
768:qHPCnjFP0tjVgwfW8YgWRj+WBQThKyrq/x3cVnO2BPdxmS+cLjrIJROrax:AP6jCPfW8GF+/qp3c1OK7mSr3rU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0279655817116cdb72efb5d74dd064b0
Files
-
0279655817116cdb72efb5d74dd064b0.exe windows:5 windows x86 arch:x86
dc2096f3e99990a1d4aad0e7ae865586
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowThreadProcessId
OpenWindowStationA
GetMessageA
SetProcessWindowStation
GetClipboardData
GetMessageW
SetThreadDesktop
GetCursorPos
GetDlgItemTextW
GetKeyState
GetDlgItem
MsgWaitForMultipleObjects
FindWindowExW
GetIconInfo
LoadCursorW
GetDlgItemTextA
CharLowerBuffA
PeekMessageA
EndDialog
CloseDesktop
GetClassNameW
ToUnicode
DispatchMessageW
GetWindowLongW
ExitWindowsEx
PeekMessageW
GetForegroundWindow
SendMessageW
CloseWindowStation
GetKeyboardState
OpenDesktopA
DrawIcon
GetWindowTextW
kernel32
HeapFree
MapViewOfFile
SetEvent
FindClose
CreateProcessW
lstrcpynW
GetCommandLineA
GetProcessTimes
GetSystemTimeAsFileTime
GetCurrentThreadId
MultiByteToWideChar
GetTempFileNameW
FlushFileBuffers
GetFileTime
SystemTimeToFileTime
CreateFileMappingW
CreateMutexW
ReadFile
lstrcpyA
GlobalUnlock
CreateThread
lstrlenW
GetTickCount
HeapAlloc
GetDriveTypeW
GetSystemTime
GetModuleFileNameA
SetEndOfFile
DisconnectNamedPipe
CloseHandle
ExpandEnvironmentStringsW
FindNextFileW
SetFileTime
SetLastError
GetComputerNameW
Sleep
MoveFileExW
WideCharToMultiByte
LeaveCriticalSection
GetFileSizeEx
CopyFileW
lstrlenA
ResetEvent
GetLocalTime
GetLastError
lstrcmpiA
GlobalLock
GetModuleHandleA
lstrcpyW
FindFirstFileW
GetCurrentProcessId
HeapReAlloc
UnmapViewOfFile
GetTimeZoneInformation
GetExitCodeProcess
GetModuleFileNameW
CreateFileW
Sections
.mrex Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jyx Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ebwf Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ