Static task
static1
Behavioral task
behavioral1
Sample
64093774aee28e6df828d198c98724df.exe
Resource
win7-20231215-en
General
-
Target
64093774aee28e6df828d198c98724df
-
Size
286KB
-
MD5
64093774aee28e6df828d198c98724df
-
SHA1
d9f2abc0c5d8825c3db9494b8e7d39fdb6b9c613
-
SHA256
37a3394d0d192dfa2be189da3b4b81d0cd8c7d27a6c75c8a666b6698d5ee63b2
-
SHA512
dcc5f96c81f41522272d534311bca1674dfd3ce0755cb5a3350bf0d8d4bf9f92b8f89e7f7c784984dddb5cd280f579dfeec430212791571689469a717893f980
-
SSDEEP
6144:og1O2nb2ejB/7oTsjW6rN0Ubg67IlQOPscRueRnqn7:lXVBEAjWseTRnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64093774aee28e6df828d198c98724df
Files
-
64093774aee28e6df828d198c98724df.exe windows:4 windows x86 arch:x86
c7b997bc00288f3e27837a7f98660adc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
GetSystemTimeAsFileTime
GlobalFindAtomW
GetTickCount
GetStartupInfoA
GetLocaleInfoW
UnhandledExceptionFilter
VirtualProtect
InterlockedExchange
SetUnhandledExceptionFilter
GetCurrentThreadId
InterlockedCompareExchange
IsDebuggerPresent
GetModuleHandleW
EnumResourceLanguagesA
GetCurrentProcess
GetCurrentProcessId
GetPrivateProfileSectionW
TerminateProcess
LocalAlloc
FoldStringW
QueryPerformanceCounter
GetProcessHeap
DeleteFileW
oleacc
CreateStdAccessibleObject
shlwapi
GetAcceptLanguagesA
PathFindExtensionW
PathCreateFromUrlW
UrlCreateFromPathW
PathAppendW
UrlUnescapeW
PathRemoveFileSpecW
StrCmpIW
PathIsRelativeW
PathCombineW
Sections
.text Size: 145KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ