Static task
static1
Behavioral task
behavioral1
Sample
384beedce7d319901771696a69773afe.exe
Resource
win7-20231215-en
General
-
Target
384beedce7d319901771696a69773afe.exe
-
Size
392KB
-
MD5
384beedce7d319901771696a69773afe
-
SHA1
58a56008bcbc46f0d8db34f2ebe57e922120a233
-
SHA256
17a500795905d40798c4ee33ce0d95d0c67f995bc9993ae032010d052020292c
-
SHA512
e371383d7f261cdade1af536397141ed061cef354f5472a4894216a528a1fc713daeefa69a61474b67b31212d0cbb06d0b88e65fd58a7d28c59b3a7aaa709cdb
-
SSDEEP
6144:C1xkujK26n0JpLteqa095Kyif+b3alW4LWmIS8khs3XvW3Kpk4xqNsy8p1SVpXhg:+X60p7D7K1mb3FCMW3KnxLpclC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 384beedce7d319901771696a69773afe.exe
Files
-
384beedce7d319901771696a69773afe.exe.exe windows:4 windows x86 arch:x86
cc52177b49e0061f7a63ee0daa231b8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess
GetCurrentProcess
user32
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow
advapi32
RegEnumValueA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
Sections
.text Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ