Static task
static1
Behavioral task
behavioral1
Sample
6777313013fa16783791138c0cc98b82.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6777313013fa16783791138c0cc98b82.exe
Resource
win10v2004-20231215-en
General
-
Target
6777313013fa16783791138c0cc98b82
-
Size
676KB
-
MD5
6777313013fa16783791138c0cc98b82
-
SHA1
8f4b3f28a2803a2a700a15f41d4943da04b7e6d3
-
SHA256
c3f829f15be832f0ba98ba69bf2d5edb6005930e5e78056a0b1930a2f6026118
-
SHA512
2afd9fd1acb4dab85cf4e85dbd2c69949e1108573d450639275fa842dee31772a01f2c3e96fff1a64aeebb050dcd171fbcfbec8dd9c19eeafdd86dc8d4fb13ea
-
SSDEEP
12288:HKeonTZwyYqXZetGE2/JuRabl/lXH/GWycutDoLFaRu0pOch9eZNZgcMhl:aet12/4ul/B/GWycu1oLFCu0schkZgc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6777313013fa16783791138c0cc98b82
Files
-
6777313013fa16783791138c0cc98b82.exe windows:4 windows x86 arch:x86
265260657426253b66c0006c7764da98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
ImpersonateDdeClientWindow
RegisterClassA
RegisterWindowMessageW
GetDlgItem
GetDlgItemTextW
GetDlgItemInt
SetMenu
BroadcastSystemMessageW
LoadBitmapA
IsClipboardFormatAvailable
RegisterClassW
EnumDesktopsW
GetKeyboardLayoutNameW
GetSystemMenu
LoadBitmapW
RegisterClassExA
WINNLSEnableIME
GetFocus
GetClassInfoW
DialogBoxIndirectParamW
LoadStringA
comdlg32
ReplaceTextW
kernel32
HeapDestroy
VirtualFreeEx
GetConsoleTitleW
GetEnvironmentStringsW
FlushFileBuffers
GetSystemTimeAsFileTime
LCMapStringA
LoadLibraryA
UnhandledExceptionFilter
GetUserDefaultLCID
IsValidLocale
DeleteCriticalSection
TlsGetValue
TlsSetValue
GetSystemInfo
GetLocaleInfoW
DebugBreak
GetNumberFormatA
TerminateProcess
LeaveCriticalSection
GetOEMCP
GetACP
GetCPInfo
EnumSystemLocalesA
VirtualQuery
VirtualFree
QueryPerformanceCounter
FreeEnvironmentStringsW
MultiByteToWideChar
GetPrivateProfileIntW
CloseHandle
GetFileType
IsBadWritePtr
SetLastError
GetLastError
CompareStringW
GetStringTypeA
VirtualAlloc
InterlockedExchange
LCMapStringW
RtlUnwind
SetEnvironmentVariableA
CompareStringA
WriteConsoleA
SetFilePointer
GetNumberFormatW
WaitForSingleObjectEx
GlobalHandle
GetDateFormatW
GetTimeZoneInformation
GetCurrentThread
GetVersion
CreateMutexA
WriteFile
SetLocalTime
GetStringTypeW
CreatePipe
GetCurrencyFormatW
HeapCreate
IsValidCodePage
GetModuleFileNameW
InterlockedIncrement
TlsAlloc
TlsFree
FreeEnvironmentStringsA
GetProcAddress
GetLocaleInfoA
SetConsoleCtrlHandler
HeapReAlloc
CreateWaitableTimerW
VirtualProtect
IsBadReadPtr
GetCommandLineW
OpenMutexA
WriteConsoleOutputCharacterW
LocalFree
GetWindowsDirectoryW
ReadFile
ExitProcess
GetStdHandle
GetCurrentProcess
GetStartupInfoW
GlobalAddAtomW
GetEnvironmentStrings
EnterCriticalSection
SetThreadAffinityMask
GetCurrentProcessId
WideCharToMultiByte
SetStdHandle
GetTimeFormatA
OutputDebugStringA
GetDateFormatA
InitializeCriticalSection
SetHandleCount
GetVersionExA
HeapFree
GetStartupInfoA
GetModuleHandleA
HeapAlloc
InterlockedDecrement
HeapValidate
GetCurrentThreadId
GetCommandLineA
WritePrivateProfileSectionW
SetConsoleTitleW
GetModuleFileNameA
GetTickCount
gdi32
RoundRect
GetDCOrgEx
PtInRegion
PlayMetaFileRecord
Ellipse
GetCharWidthFloatW
CreateFontIndirectW
Chord
ColorCorrectPalette
GetFontLanguageInfo
GetBkColor
GetEnhMetaFileBits
comctl32
InitCommonControlsEx
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ