Static task
static1
Behavioral task
behavioral1
Sample
72e4c408912ef599bc24b88c84c0ebbb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72e4c408912ef599bc24b88c84c0ebbb.exe
Resource
win10v2004-20231222-en
General
-
Target
72e4c408912ef599bc24b88c84c0ebbb
-
Size
165KB
-
MD5
72e4c408912ef599bc24b88c84c0ebbb
-
SHA1
314df41b7db14f082c1594f8bea786ac9bb3bd2e
-
SHA256
b35d28a13c597ecc1fe2df1b3f8241c5ea3028f22b0a13a5eb2f70af73f2f8fb
-
SHA512
10f8f05167fbd64f9289feb55cb4566784793abfa2cfe72b92aea4ecd100b792ae1bf65c0ef9789a4ac1171abb63a3542ed99bf35c7424c78c8f707d3e1940d2
-
SSDEEP
3072:2LA/SfUGKK/aO4IAFVnav9G+JZlkXgZ3H0u87oC76ZSb2NaEpxgKHpMfyhcDh2Gn:4Vu3uv9G86wqugoYCNa0pMfLDh28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e4c408912ef599bc24b88c84c0ebbb
Files
-
72e4c408912ef599bc24b88c84c0ebbb.exe windows:4 windows x86 arch:x86
c55d58516ab8b94df1945dd02ca3b318
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
CODE Size: 155KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE