Static task
static1
Behavioral task
behavioral1
Sample
36bcce60863f971217a4583d756fac7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
36bcce60863f971217a4583d756fac7a.exe
Resource
win10v2004-20231222-en
General
-
Target
36bcce60863f971217a4583d756fac7a
-
Size
105KB
-
MD5
36bcce60863f971217a4583d756fac7a
-
SHA1
e9572ab79fa527e6470c8eb1069e9f3a9e5333e0
-
SHA256
c9cbd1c7e2bcc372b675978014afdd2cafb58cef8597c605ad2164e7142c782a
-
SHA512
68d4564a519b288f6fd54f1a33ee282c82366157f812c33bc52c6847b1a1993bcca575989a79eff295719bdd00e42079890b6dfa23d7b167d0d9ea4ed525e2db
-
SSDEEP
384:3lfPEQR6s/COeaIKMHpKRuviPuv8eaV8pRMzgBKrcxYpc8N/oAl:3B8Qv6OepHpKRuviPuvvaVeRMFQMN/oK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36bcce60863f971217a4583d756fac7a
Files
-
36bcce60863f971217a4583d756fac7a.exe windows:5 windows x86 arch:x86
d864ed0b007ad7a7b0e8b0cdb7d9e443
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette
msacm32
acmStreamOpen
acmDriverPriority
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
FreeConsole
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.MPRESS1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE