Static task
static1
Behavioral task
behavioral1
Sample
a79c347cc0f264cc37d2c203a804ac58.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a79c347cc0f264cc37d2c203a804ac58.exe
Resource
win10v2004-20231215-en
General
-
Target
a79c347cc0f264cc37d2c203a804ac58.exe
-
Size
194KB
-
MD5
a79c347cc0f264cc37d2c203a804ac58
-
SHA1
0b2d6b3d3010cc005848deac046416d3dbdc48a9
-
SHA256
ca83832bf8e83ac9a97a01e589435b4666efa33d5f2f7f54b89dd58363e4a264
-
SHA512
8aabaa15dc7b5774c8f0127c4f32a10f3bcd6d48516391206e75e0f60ad99a004cb7b3f2f133c6cc74f659a227b5c71ea15f204bffbe496ce45c582c9395383a
-
SSDEEP
3072:/OlHHBuNrVw61gCi+O5MUINLEXyI1x7TzM2exumeYJnssSTMiJN:/OlHhAVw6TLO5wFcyIvexumfZIMo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79c347cc0f264cc37d2c203a804ac58.exe
Files
-
a79c347cc0f264cc37d2c203a804ac58.exe.exe windows:55979 windows x86 arch:x86
c0bd504bf908d3377bca07e9c69ffc9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetCurrentThreadId
GetProcessHeap
GetProcessHeap
WriteFile
HeapReAlloc
VirtualAlloc
CloseHandle
LocalAlloc
SetUnhandledExceptionFilter
GetVersionExA
VirtualAlloc
WriteFile
GetCommandLineA
GetStartupInfoW
GetCurrentProcess
GetCurrentProcess
GetModuleFileNameA
InterlockedIncrement
GetACP
Sleep
GetCommandLineW
WriteFile
VirtualAlloc
WriteFile
GetTickCount
HeapDestroy
ReadFile
GetModuleHandleA
QueryPerformanceCounter
SetEvent
user32
BeginPaint
PtInRect
GetFocus
GetDesktopWindow
SetTimer
GetDlgItem
EndPaint
SendDlgItemMessageW
SetFocus
DefWindowProcW
GetClientRect
GetMenu
IsDialogMessageW
WinHelpW
CheckDlgButton
GetDlgItemTextW
GetWindowTextW
CreateWindowExW
UpdateWindow
CopyRect
IsWindow
GetMenu
PostQuitMessage
ReleaseDC
GetMessageW
LoadIconW
CopyRect
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ