Static task
static1
Behavioral task
behavioral1
Sample
219554d0f9212cf34f6608c01220627f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
219554d0f9212cf34f6608c01220627f.exe
Resource
win10v2004-20231222-en
General
-
Target
219554d0f9212cf34f6608c01220627f
-
Size
17KB
-
MD5
219554d0f9212cf34f6608c01220627f
-
SHA1
b6a0fd9619fb3462d0ac97fc5b134a26d72ec05c
-
SHA256
1ee0002955044715549cf2e87bf20d450a565db3cd500312b60287c5b4f57cd1
-
SHA512
cafcd093da5b1eb197a891dcbd3db2ce6741b3b38461bbc45c1345c054f0bb4f37793fe268cb70a43e07f52b1da1b588042e19ced428b59a3b194afce9c4562a
-
SSDEEP
192:6gA52dbFItVAbcPr/fA+LUt3LUSJaBh3PuDzSF5iMtZUN63XinAiTyeEP:Pc2dbiobczfABu3QN+xHcTytP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219554d0f9212cf34f6608c01220627f
Files
-
219554d0f9212cf34f6608c01220627f.exe windows:4 windows x86 arch:x86
91c7658b572f7f896f8493fa904925d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetTickCount
LoadLibraryExA
HeapReAlloc
HeapCreate
SetConsoleCP
GetVersion
GetModuleHandleA
WaitForMultipleObjects
lstrlenA
GlobalUnlock
SuspendThread
GetConsoleCP
VirtualProtect
InterlockedExchange
CloseHandle
GetStdHandle
GetAtomNameA
WaitForSingleObject
GetCommandLineA
GetSystemDefaultLangID
user32
DrawCaption
FillRect
DispatchMessageA
SetScrollInfo
CopyImage
CreateMenu
DialogBoxParamA
GetCursorInfo
SetPropA
InvertRect
CreateIcon
CreateCursor
DestroyMenu
SetWindowPos
InsertMenuA
FindWindowA
DragObject
IsDialogMessage
GetKeyState
EnableScrollBar
GetDlgItem
GetKeyboardLayout
advapi32
RegEnumValueA
RegEnumKeyA
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ