Static task
static1
Behavioral task
behavioral1
Sample
718cd4edda7a37152aa7f2d77128838c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
718cd4edda7a37152aa7f2d77128838c.exe
Resource
win10v2004-20231222-en
General
-
Target
718cd4edda7a37152aa7f2d77128838c
-
Size
680KB
-
MD5
718cd4edda7a37152aa7f2d77128838c
-
SHA1
42385ce1a747b21a8698b768e60f680e36e81c7e
-
SHA256
9c57842fa05f4b96fbd00934f9fb83b86f38071f4d4f27c67c11b843e2c91bcc
-
SHA512
c65b677d43d63a52bfc579856e4c6f102bc295da779e82812fa7196d0ae6c8c044870f647b760f82578d61fceab21fa8eab4589287ac9d91ba0a1c6db45e6fd7
-
SSDEEP
12288:SEdubgpHjxpHILKWu7ptW7Y7lHOgMfCGKEtTvKqJP:S8ogpDxpz7Q8lJMC8SY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 718cd4edda7a37152aa7f2d77128838c
Files
-
718cd4edda7a37152aa7f2d77128838c.exe windows:4 windows x86 arch:x86
ef0ad82ee8a7e71bd01ce933e1680177
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
SetHandleCount
GetLocaleInfoA
WriteConsoleA
TryEnterCriticalSection
GetProcAddress
GetThreadPriority
GetUserDefaultLCID
ReadConsoleOutputAttribute
SetConsoleCP
CreateMutexW
VirtualAlloc
GetEnvironmentStrings
SystemTimeToFileTime
GetStringTypeW
SetComputerNameW
SetFileAttributesA
GetSystemDirectoryW
GetLastError
GetTimeFormatA
CreateMutexA
IsValidLocale
IsValidCodePage
GetStartupInfoA
DeleteCriticalSection
CloseHandle
WritePrivateProfileStringW
GetLogicalDriveStringsW
GetConsoleMode
FreeEnvironmentStringsW
ReadConsoleOutputCharacterA
LocalShrink
SetLastError
TlsSetValue
SetEnvironmentVariableA
VirtualFreeEx
GetTickCount
LocalFlags
CreateRemoteThread
GetEnvironmentVariableA
EnumTimeFormatsW
GetCurrentProcessId
GetLocaleInfoW
TlsAlloc
GetCalendarInfoW
InterlockedExchange
AllocConsole
HeapFree
LCMapStringW
TlsFree
lstrcmp
VirtualUnlock
GetCurrentThreadId
ReadFile
GetStdHandle
InterlockedDecrement
OutputDebugStringW
GetCompressedFileSizeA
TlsGetValue
GetStringTypeA
CompareStringA
HeapDestroy
GlobalAddAtomA
VirtualQuery
CreateThread
IsDebuggerPresent
WritePrivateProfileStringA
GetCommandLineW
InterlockedIncrement
GetDateFormatA
GetTempPathW
TerminateProcess
WriteConsoleOutputCharacterW
GetVolumeInformationA
GetOEMCP
SetStdHandle
GetSystemTime
FlushFileBuffers
HeapSize
GetVersionExA
GetCPInfo
GetProcessHeap
GetCurrentProcess
GetThreadSelectorEntry
GetThreadPriorityBoost
GetModuleFileNameA
EnumSystemLocalesA
FindResourceExW
GetTimeZoneInformation
WriteConsoleInputA
ReadConsoleInputW
VirtualFree
GetModuleHandleA
SetFilePointer
GetEnvironmentStringsA
OpenMutexA
GlobalFindAtomW
HeapCreate
QueryPerformanceCounter
LocalFree
WriteConsoleW
EnterCriticalSection
FreeLibrary
CreateFileA
LCMapStringA
IsBadWritePtr
GetConsoleCP
GetModuleHandleW
SetConsoleScreenBufferSize
GetLocalTime
SetUnhandledExceptionFilter
GetModuleFileNameW
ExitProcess
MultiByteToWideChar
UnhandledExceptionFilter
GetStartupInfoW
LeaveCriticalSection
GetSystemTimeAsFileTime
WriteFile
SetConsoleCtrlHandler
HeapReAlloc
SleepEx
RtlMoveMemory
LoadLibraryA
HeapAlloc
CompareStringW
GetCurrentThread
GetEnvironmentStringsW
SetConsoleTitleA
GetACP
FreeEnvironmentStringsA
Sleep
UnmapViewOfFile
GetCommandLineA
GetFileType
InitializeCriticalSection
GetConsoleOutputCP
CreateMailslotW
GlobalCompact
WideCharToMultiByte
RtlUnwind
gdi32
DeleteObject
GetObjectW
OffsetClipRgn
CombineRgn
CreateDCW
CombineTransform
GetDeviceCaps
DeleteDC
CreateRectRgn
user32
GetClipboardOwner
GetMessagePos
DestroyWindow
DefWindowProcA
ShowWindow
GetCursor
MapVirtualKeyExA
GetWindowDC
SetWindowPlacement
GetGuiResources
RemovePropW
SendDlgItemMessageA
IsDialogMessageW
ScreenToClient
DialogBoxParamW
SetPropA
LoadMenuA
MessageBoxW
GetMonitorInfoA
GetUserObjectInformationW
SetClassLongA
EnumPropsW
DefMDIChildProcA
TrackPopupMenu
EndDialog
GetDialogBaseUnits
CreateWindowExA
RegisterClassExA
GetUserObjectInformationA
IsDlgButtonChecked
GetClipboardFormatNameA
EndTask
EditWndProc
GetClassLongA
UpdateWindow
DdeKeepStringHandle
DdeFreeDataHandle
GetClassInfoA
ReleaseDC
RegisterClassA
GetQueueStatus
FindWindowExW
PeekMessageA
shell32
RealShellExecuteExW
SHInvokePrinterCommandA
ShellExecuteEx
comctl32
InitCommonControlsEx
ImageList_Copy
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetBkColor
ImageList_Add
DrawStatusTextA
ImageList_Merge
ImageList_SetDragCursorImage
ImageList_Destroy
ImageList_SetFlags
ImageList_Write
CreateStatusWindowW
ImageList_GetImageInfo
ImageList_LoadImageA
CreateMappedBitmap
ImageList_Create
comdlg32
PageSetupDlgA
GetOpenFileNameW
PrintDlgA
Sections
.text Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ