Static task
static1
Behavioral task
behavioral1
Sample
719c8f2fac4dcf46a5a5f5eaa3ebd298.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
719c8f2fac4dcf46a5a5f5eaa3ebd298.exe
Resource
win10v2004-20231222-en
General
-
Target
719c8f2fac4dcf46a5a5f5eaa3ebd298
-
Size
357KB
-
MD5
719c8f2fac4dcf46a5a5f5eaa3ebd298
-
SHA1
594eecbe6d9fece6173de0d12cf3a7a6c063bb3b
-
SHA256
1cda05cb20efbf63351c1640c1094a8a2307d8bb28d82aa099b5b0831d208378
-
SHA512
1e7bd1e561ed5500d8deac54fdb9b780dd505a9af34b75ff3d1e327556990c338f332b3eaae3ea26278d401f7e16cc62e55234f149b3c8f604c2a6a57d791052
-
SSDEEP
6144:9auTCqzw8h+gaNIn/vSNDTFXBsBSthuLB4va750nO3pB3GiAY9u8mZN6:mQT4NInSNDTRBskH1aOUJGrOu8me
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 719c8f2fac4dcf46a5a5f5eaa3ebd298
Files
-
719c8f2fac4dcf46a5a5f5eaa3ebd298.exe windows:4 windows x86 arch:x86
4b932903b05639556dea7ae724851498
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
FindFirstChangeNotificationW
FindNextChangeNotification
EnumCalendarInfoExW
FindCloseChangeNotification
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceW
GetCurrentDirectoryW
GetTickCount
Sleep
MulDiv
FindFirstFileW
FindClose
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetModuleHandleW
GetVersionExA
oleaut32
VARIANT_UserFree
CreateErrorInfo
VarUI1FromUI8
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString
msvfw32
ICInfo
Sections
.text Size: 240KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE