Static task
static1
Behavioral task
behavioral1
Sample
63b102180777b063d11061ae4b8f2a35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63b102180777b063d11061ae4b8f2a35.exe
Resource
win10v2004-20231222-en
General
-
Target
63b102180777b063d11061ae4b8f2a35.bin
-
Size
1.4MB
-
MD5
63b102180777b063d11061ae4b8f2a35
-
SHA1
8bf24d909ea9711b343e29967787b1af5c41979e
-
SHA256
e3abce14bef6505fccf0813920553acf876e997c91cad8253d45050310303810
-
SHA512
779eb3defd05cc49da16d73ef9757ed7c474b63425a2f4d9334fd0bb7597ad271e532bd6fb83a384da785f136cbcace26f699b1f3625fc87e1cd10927c4c0b48
-
SSDEEP
24576:GhfPt/9Nj0n9oaYYnbPHl+1RD5cC+8J1oYo97XUgkv:69blYbHl0cIoF7kg8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b102180777b063d11061ae4b8f2a35.bin
Files
-
63b102180777b063d11061ae4b8f2a35.bin.exe windows:4 windows x86 arch:x86
ca1c7853b29bed02bab5cfa77f707413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
DeleteCriticalSection
TlsSetValue
lstrlenW
Sleep
user32
GetKeyboardType
WindowFromPoint
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
imm32
ImmSetCompositionWindow
Sections
.text Size: 10KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE