?TemporaryArrayCre
Static task
static1
Behavioral task
behavioral1
Sample
241ccf49c8c971b86a797189f690bcc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
241ccf49c8c971b86a797189f690bcc7.exe
Resource
win10v2004-20231222-en
General
-
Target
241ccf49c8c971b86a797189f690bcc7
-
Size
156KB
-
MD5
241ccf49c8c971b86a797189f690bcc7
-
SHA1
feb683d872d3ae94872396d29ea3ccddd6595deb
-
SHA256
5163107105ca04cb6e34a024816826730795075d408274e650acab9689661128
-
SHA512
71abb73b69242b5e88c7ae3b95c237e8f91178dda6511083af386f6d3c220e5c704b5c776b451b3f455aa2bb152fcb64b72a368c0cb1c38cf8f06cedc404d9b5
-
SSDEEP
3072:SXzytB0+15capXwxBFQZrLe9d+aVmRUYKazXueMu:SXzyDf1yapX2irLenVmRUYzN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 241ccf49c8c971b86a797189f690bcc7
Files
-
241ccf49c8c971b86a797189f690bcc7.exe windows:5 windows x86 arch:x86
137a9b4a6059d8b53e3c9d8dbb713fc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateRectRgn
GetRgnBox
kernel32
CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle
user32
SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA
ntdll
RtlCompareMemory
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE