Static task
static1
Behavioral task
behavioral1
Sample
454dec0dbfff49edd3ccc72b4a9b0776.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
454dec0dbfff49edd3ccc72b4a9b0776.exe
Resource
win10v2004-20231215-en
General
-
Target
454dec0dbfff49edd3ccc72b4a9b0776
-
Size
252KB
-
MD5
454dec0dbfff49edd3ccc72b4a9b0776
-
SHA1
cd779da938bb6abc3d115d82a8a8a4a08d7c2100
-
SHA256
5bf9a810645c596e9e43e657d1751a4760c802fbb6e2bb0fe58348e1d0e6f67a
-
SHA512
797f7991b58ddcc4b7cf552b875838f7d7fb816a8e3677eef7f728913128a3a307f6ddfab571ac7695df6700f6a0ea43778bbdbcf98d850c3677ae6f6c648bc4
-
SSDEEP
6144:pzj0ZXuvMvkbKeWwvK4I61zxAZxOm5oVRu4:pEZygKUwNFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454dec0dbfff49edd3ccc72b4a9b0776
Files
-
454dec0dbfff49edd3ccc72b4a9b0776.exe windows:4 windows x86 arch:x86
bf37b27f1e630061a1a370b39ea6c343
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 233KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE