Static task
static1
Behavioral task
behavioral1
Sample
658db2c67f4c594bab403099ed3386a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
658db2c67f4c594bab403099ed3386a9.exe
Resource
win10v2004-20231215-en
General
-
Target
658db2c67f4c594bab403099ed3386a9
-
Size
47KB
-
MD5
658db2c67f4c594bab403099ed3386a9
-
SHA1
4a16647dfc9c1042fb369a10cd919d950d3bb686
-
SHA256
383ba40ac8b71a5af3dfa4d2a4b7eb934b1b63716254e59a40ff21d1629c8eb9
-
SHA512
25e8652bbd5eb29fd6889f6b26b8d47fa1971241dc0be375fd90e75f4c8a45250378d107f677b1b9c6a62e104fa0e0267ab432ef028bd2112b7893e8666e2f10
-
SSDEEP
768:QUb4kr7OCgsS7giFwv2b1HVmuoGVGSQavigQMlq6VbYpq8e4qoVp:QKP1hSg7v2b1cdGVGSDvigQMo6934q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658db2c67f4c594bab403099ed3386a9
Files
-
658db2c67f4c594bab403099ed3386a9.exe windows:4 windows x86 arch:x86
3b16ef3c3dc6e7010a038b6325f0a226
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
VirtualProtect
GetSystemTime
ExitProcess
lstrcatA
CloseHandle
GetModuleFileNameA
user32
MessageBoxA
SetCapture
ReleaseCapture
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE