Static task
static1
Behavioral task
behavioral1
Sample
378590b29ccfb9585771c33ac9dd7fdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
378590b29ccfb9585771c33ac9dd7fdf.exe
Resource
win10v2004-20231215-en
General
-
Target
378590b29ccfb9585771c33ac9dd7fdf
-
Size
170KB
-
MD5
378590b29ccfb9585771c33ac9dd7fdf
-
SHA1
238c8ce60e8e7b0fd71af23380d6d6455fcd1a95
-
SHA256
bbd28b5f5f6aadd4476771c57d777d99efc985ddba5883fce025a103976e2ca2
-
SHA512
38c3897248d77f1dd2a8699f9925f37263c9d90779fec2a8904a5445af714bcf081bbf16f2cbe85ba090f6b0d2b9a0878506f34140d76e1ab8f053a3cd176570
-
SSDEEP
3072:cDnPhRv1PpVlL7b/QMHJxKMjhwXQlRPh3T0xKNuZkdEZYQSkyM7DYcBo2M:cTjR7lHboM7hwAlRPh3lQkd8GMPYh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 378590b29ccfb9585771c33ac9dd7fdf
Files
-
378590b29ccfb9585771c33ac9dd7fdf.exe windows:4 windows x86 arch:x86
8b56f075dff7f31519f16fcacd0a2de0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetModuleHandleA
GetCommandLineA
ExitProcess
VirtualAlloc
CreateThread
user32
GetWindowRect
LoadCursorA
GetSystemMetrics
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
GetDC
ReleaseDC
GetSysColor
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadIconA
gdi32
DeleteObject
LineTo
MoveToEx
SelectObject
CreatePen
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ