Static task
static1
Behavioral task
behavioral1
Sample
712de6c572214253c075a918c9f02512.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
712de6c572214253c075a918c9f02512.exe
Resource
win10v2004-20231215-en
General
-
Target
712de6c572214253c075a918c9f02512
-
Size
342KB
-
MD5
712de6c572214253c075a918c9f02512
-
SHA1
5ad88b1083d3e55d1166338bd409634802e69aa4
-
SHA256
cab70c33ab34b8213f9a1c6941814e952b7cfba5a3206d8ee0a27f8c172d8f0a
-
SHA512
b22367a3c8c136e3195c350677babe8f961da106b38c435f7751c5c5199f834e0aeb23cbea389caa3e62c1a31ccbec2524ead9dc50ffbd5042ff892183f2bed4
-
SSDEEP
6144:6lQkt6UTFUpKabiTABSjYbI1tw/0JXizHhNOdHdAzeBAZG:6lQkw4FGKaIw6Ybyw+Xibhsd9+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 712de6c572214253c075a918c9f02512
Files
-
712de6c572214253c075a918c9f02512.exe windows:4 windows x86 arch:x86
91f4bdf73643e37687910d1a8d8f620b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
version
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
user32
SendMessageW
GetSystemMetrics
SetWindowPos
DrawEdge
GetPropA
GetKeyboardLayoutList
EnumChildWindows
GetKeyState
SetScrollPos
CharUpperBuffA
CreatePopupMenu
MoveWindow
SetWindowTextA
EqualRect
WaitMessage
SetClipboardData
PeekMessageA
GetWindowPlacement
FillRect
CloseClipboard
RedrawWindow
GetSysColor
KillTimer
MapVirtualKeyA
EnableMenuItem
GetWindowLongW
TranslateMDISysAccel
GetKeyboardLayoutNameA
IsWindow
GetKeyboardState
IsDialogMessageA
GetScrollInfo
DestroyIcon
SendMessageA
MsgWaitForMultipleObjects
GetMenuStringA
GetWindowThreadProcessId
CharNextW
MessageBoxA
IsIconic
CreateMenu
ReleaseCapture
InflateRect
LoadKeyboardLayoutA
IsWindowUnicode
GetScrollRange
GetCursorPos
IsRectEmpty
ShowWindow
SetFocus
ShowScrollBar
LoadBitmapA
GetActiveWindow
GetTopWindow
CallWindowProcA
SetScrollInfo
UpdateWindow
OffsetRect
ShowOwnedPopups
IsWindowVisible
GetMenu
SetPropA
ChildWindowFromPoint
GetKeyNameTextA
SetParent
GetMenuItemCount
FrameRect
GetKeyboardLayout
SetRect
EnableScrollBar
SetWindowLongW
GetWindowTextA
shell32
DragQueryFileA
SHGetSpecialFolderLocation
SHGetFolderPathA
gdi32
GetObjectA
SetBkColor
SetTextColor
CreateDIBSection
CreateCompatibleBitmap
GetDIBits
GetDIBColorTable
kernel32
VirtualAlloc
GetACP
GlobalAlloc
GetModuleHandleA
LoadLibraryA
GetVersionExA
GetCommandLineA
LoadLibraryExA
GetCommandLineW
ExitProcess
VirtualAllocEx
IsBadReadPtr
ExitThread
GetProcAddress
lstrlenW
Sections
CODE Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC1 Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 512B - Virtual size: 315B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC9 Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC0 Size: 512B - Virtual size: 251B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC3 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ