Static task
static1
Behavioral task
behavioral1
Sample
37e3eb41d02991038c77da1cf3423176.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37e3eb41d02991038c77da1cf3423176.exe
Resource
win10v2004-20231215-en
General
-
Target
37e3eb41d02991038c77da1cf3423176.exe
-
Size
58KB
-
MD5
37e3eb41d02991038c77da1cf3423176
-
SHA1
634b6b68edd78506a69a80fc2d34623f93ee02c9
-
SHA256
4044d10f57235f8a4711ef05e70c349f18ceccf3854e804ee78c848bf78a75f3
-
SHA512
1c02c316005a232213ae2e2f3ed7c22f3847045bb04a0d67d7a7e843244ee372ec5d93d3dee60d8d4a4961ef098cd22d6429dad544450dbe2ecce70b84c80a33
-
SSDEEP
768:DXb4UWCntgmkQtqjc+0T0PbzX8pb0S3Shl9DhMjAlNIGruRD7Y9tRso1fjNJd1Xp:7HtEQ8gybzspb0SivfCRnY97sobrX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e3eb41d02991038c77da1cf3423176.exe
Files
-
37e3eb41d02991038c77da1cf3423176.exe.exe windows:5 windows x86 arch:x86
04a5d814163f87a26237831e19f04276
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptHashData
RegCreateKeyExA
RegEnumKeyExA
shlwapi
PathFileExistsW
PathFindFileNameW
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
FindWindowExA
GetDlgItem
GetDlgItemTextA
GetKeyboardState
GetMenuItemID
SendMessageA
Sections
.fohon Size: 48KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gzar Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lin Size: 6KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ