Static task
static1
Behavioral task
behavioral1
Sample
6732080ec41f5f756a561e5185f8f11f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6732080ec41f5f756a561e5185f8f11f.exe
Resource
win10v2004-20231222-en
General
-
Target
6732080ec41f5f756a561e5185f8f11f
-
Size
50KB
-
MD5
6732080ec41f5f756a561e5185f8f11f
-
SHA1
2613a99b5568057abab2e4d1c2a5bd5dcb991af6
-
SHA256
f3dd73bc09b2f8a24845fbace9817220da9f6c07ffe69c23c6bbea5500ffa721
-
SHA512
269078cc563663922e56fc23dc24dea7a8a2ab3e5d05005958a0ad2397f02f8232c14dbf8f452220babd135844016d2b556b690f86e6408a19790baafd614eac
-
SSDEEP
1536:S8zLwKXL9hkd8f5xhCmvW2AGTNRqME0L:SDyLkd8gQW02PY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6732080ec41f5f756a561e5185f8f11f
Files
-
6732080ec41f5f756a561e5185f8f11f.exe windows:4 windows x86 arch:x86
7e7e431687d4dda168161ead1740e373
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DosDateTimeToFileTime
ExitProcess
GetNumberOfConsoleInputEvents
GetUserDefaultLCID
GlobalFix
MoveFileA
SignalObjectAndWait
TransmitCommChar
VirtualProtect
_hwrite
advapi32
AccessCheckAndAuditAlarmA
AddAuditAccessAce
CryptDecrypt
RegCreateKeyA
RegCreateKeyExA
RegQueryInfoKeyW
SetSecurityDescriptorDacl
user32
BeginPaint
ChangeMenuW
EmptyClipboard
GetClassNameW
IMPSetIMEW
IsCharAlphaNumericW
IsCharUpperW
IsDialogMessageA
IsRectEmpty
MonitorFromWindow
RegisterWindowMessageA
SetCapture
SetProcessDefaultLayout
WindowFromPoint
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE