Static task
static1
Behavioral task
behavioral1
Sample
684e43ab0514d403996f56b196e6995b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
684e43ab0514d403996f56b196e6995b.exe
Resource
win10v2004-20231215-en
General
-
Target
684e43ab0514d403996f56b196e6995b
-
Size
44KB
-
MD5
684e43ab0514d403996f56b196e6995b
-
SHA1
80e4bf6a320d8b24a7d1a39e2b6c6210d8e083ae
-
SHA256
7f3b3efcba082f54468aed0ee0b81733a4730bc39b5f52858aaeab8c71505e9f
-
SHA512
8cb36360d286d53be6399770fad7668afdf14b844a0e41de84ea06c057b3610b5441932b042ccd331549fe64dd32fd72a01b5ec2a9f288ffe3ab678ac3af0940
-
SSDEEP
768:6710wG8dJTe+1ETmeBfuFEpuMwq5hVHVAFGPDtyqPr6vFcrwxypM05:yd11ZOpDwq9HiFGPDtyqP+v6rmypM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684e43ab0514d403996f56b196e6995b
Files
-
684e43ab0514d403996f56b196e6995b.exe windows:4 windows x86 arch:x86
8201457df72ba7a2450c1d990b6ae377
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
ClearCommBreak
CreateNamedPipeA
CreateSemaphoreA
EnumResourceTypesA
EnumSystemLocalesA
ExitProcess
GetConsoleCP
GetConsoleTitleW
GetDiskFreeSpaceExW
GetProcessTimes
GetStartupInfoW
GetSystemDefaultLangID
GetTempPathA
GetVolumeInformationA
HeapUnlock
HeapValidate
IsSystemResumeAutomatic
LocalUnlock
MoveFileExW
ReadConsoleOutputAttribute
SetCommMask
SetCurrentDirectoryA
SetStdHandle
SetUnhandledExceptionFilter
WriteFileGather
user32
BroadcastSystemMessage
DefMDIChildProcA
DialogBoxIndirectParamW
DrawFrame
GetInputState
GetOpenClipboardWindow
GetWindowTextA
GetWindowWord
ImpersonateDdeClientWindow
IsDialogMessageA
LoadImageW
MapWindowPoints
OemKeyScan
RegisterDeviceNotificationA
RegisterDeviceNotificationW
RegisterHotKey
ReleaseDC
ScrollDC
SetCursor
SetDlgItemTextW
TranslateMessage
WindowFromPoint
gdi32
AbortDoc
CopyEnhMetaFileW
CreateBitmapIndirect
CreateCompatibleBitmap
CreateDIBSection
CreateEllipticRgn
CreateEllipticRgnIndirect
EnableEUDC
ExcludeClipRect
FrameRgn
GdiFlush
GdiGetBatchLimit
GetCharWidthFloatA
GetEnhMetaFileBits
GetStretchBltMode
PolyTextOutA
Polygon
RectInRegion
RemoveFontResourceA
RemoveFontResourceW
RestoreDC
SelectPalette
SetAbortProc
SetEnhMetaFileBits
SetGraphicsMode
SetMiterLimit
SwapBuffers
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE