Static task
static1
Behavioral task
behavioral1
Sample
718d5e8751e16b6b7cc5c4d9e76862f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
718d5e8751e16b6b7cc5c4d9e76862f5.exe
Resource
win10v2004-20231215-en
General
-
Target
718d5e8751e16b6b7cc5c4d9e76862f5
-
Size
1.0MB
-
MD5
718d5e8751e16b6b7cc5c4d9e76862f5
-
SHA1
36fb096449a2326fe59b55ccd4e818f50ef2b7b2
-
SHA256
6e536786064e80d9453174403e27898e3534073ce269eac41c35610384f18408
-
SHA512
32277ec2ac64e41dff3fceae07e09f4703df50a3e14f19014aa8f4cd364a7c07863a452ad8fded52b1cd887bc64345f674011e54fcaef874cb9941b75fc1630a
-
SSDEEP
24576:BEhuZ3ihAgOo5cb3iDtQr4scTDxB5R4bLCPQ:BEUBcAg7Sb3iZQrVi9B5+qPQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 718d5e8751e16b6b7cc5c4d9e76862f5
Files
-
718d5e8751e16b6b7cc5c4d9e76862f5.exe windows:4 windows x86 arch:x86
cc69966b7ea701a0d8cd400bf41316db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateDCA
CreateICW
GetEnhMetaFileBits
UpdateICMRegKeyA
GetBoundsRect
GetGlyphOutlineW
DeleteDC
EndPath
PlayMetaFileRecord
CloseMetaFile
CopyMetaFileW
GetWorldTransform
RectInRegion
GetSystemPaletteUse
CreateEllipticRgn
GetBkColor
PlayEnhMetaFile
GetTextExtentExPointW
GetDeviceCaps
PolyBezierTo
GetArcDirection
comctl32
ImageList_Write
ImageList_GetDragImage
ImageList_Destroy
ImageList_LoadImageA
CreatePropertySheetPage
DrawStatusTextW
InitMUILanguage
CreateToolbar
DrawStatusTextA
ImageList_GetImageRect
ImageList_Replace
CreateToolbarEx
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_DrawIndirect
CreateUpDownControl
ImageList_DragMove
ImageList_DrawEx
ImageList_Read
user32
ShowWindow
CreateWindowExW
RegisterClassExA
CopyAcceleratorTableW
SetWindowLongA
CharToOemBuffA
UnpackDDElParam
SetUserObjectSecurity
EnumDesktopsA
RegisterClassA
MessageBoxW
kernel32
MultiByteToWideChar
HeapAlloc
GetProcAddress
InterlockedDecrement
TlsSetValue
GetProcessHeaps
RtlUnwind
GetEnvironmentStrings
UnhandledExceptionFilter
IsValidLocale
ReadFile
IsDebuggerPresent
HeapReAlloc
GetTickCount
OpenWaitableTimerA
FlushFileBuffers
GetCurrentProcess
SetConsoleCtrlHandler
IsValidCodePage
GetConsoleOutputCP
GetConsoleMode
GetStringTypeW
WriteFile
WriteConsoleA
GetCommandLineA
GetEnvironmentStringsW
HeapDestroy
FreeLibrary
LCMapStringA
WriteConsoleW
GetTimeZoneInformation
GetLastError
LoadLibraryA
SetHandleCount
FreeEnvironmentStringsW
TerminateProcess
EnumSystemLocalesA
RtlZeroMemory
GetCurrentProcessId
VirtualAlloc
CompareStringA
LeaveCriticalSection
GetConsoleCP
InterlockedIncrement
WideCharToMultiByte
TlsGetValue
HeapFree
lstrcmp
SetEnvironmentVariableA
VirtualFree
GetModuleHandleA
CompareStringW
SetStdHandle
GetStdHandle
FreeEnvironmentStringsA
GetCurrentThread
ExitProcess
GetSystemTimeAsFileTime
VirtualQuery
GetLocaleInfoW
GetOEMCP
GetStringTypeA
SetUnhandledExceptionFilter
GetUserDefaultLCID
HeapSize
EnterCriticalSection
LCMapStringW
TlsAlloc
CreateMutexA
GetProcessHeap
lstrcmpiW
CreateFileA
SetFilePointer
HeapCreate
Sleep
GetTimeFormatA
GetLocaleInfoA
InterlockedExchange
GetCPInfo
GetStartupInfoA
GetCurrentThreadId
InitializeCriticalSection
GetModuleFileNameA
SetLastError
CloseHandle
QueryPerformanceCounter
DeleteCriticalSection
GetDateFormatA
GetVersionExA
SetThreadPriority
TlsFree
GetACP
FileTimeToDosDateTime
OpenMutexA
GetFileType
Sections
.text Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 629KB - Virtual size: 627KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ