Static task
static1
Behavioral task
behavioral1
Sample
71b2f3c40cf873641f39dde41d160c6a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71b2f3c40cf873641f39dde41d160c6a.exe
Resource
win10v2004-20231215-en
General
-
Target
71b2f3c40cf873641f39dde41d160c6a
-
Size
608KB
-
MD5
71b2f3c40cf873641f39dde41d160c6a
-
SHA1
ca0aa9c6e5be1fba93ca3a5da3ed01584f3c9495
-
SHA256
046a1ab07d00310dfdbb8390f614bf3cd90aad379c5c713fc62889ea72792335
-
SHA512
1ed5e3b99974e434494d952e65df913dd6dfd599fd08161a024489e8efed78c04facaa91473124b8179f6db97c58186e0b962840f2ba511bf74f9083994fa87e
-
SSDEEP
12288:72KXHc77k5zsOn91Sbj+1+rG1Bhdk6b4LsXbqFVZguy1ukVLoGERBo2:72KXeCz7I+1GMdkVTcv1VVKt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 71b2f3c40cf873641f39dde41d160c6a
Files
-
71b2f3c40cf873641f39dde41d160c6a.exe windows:4 windows x86 arch:x86
d78579f66c7d2b6c2168bf88dd5d0ad2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
ChooseColorW
ChooseFontA
CommDlgExtendedError
FindTextA
GetSaveFileNameA
GetSaveFileNameW
LoadAlterBitmap
PrintDlgA
PrintDlgExA
PrintDlgW
WantArrows
dwLBSubclass
dwOKSubclass
user32
DefFrameProcA
FillRect
InvalidateRect
SetCursor
SetMenuItemInfoA
TrackPopupMenuEx
CreateWindowExA
kernel32
GetVersionExA
HeapCreate
HeapAlloc
GetStartupInfoA
GetPrivateProfileSectionNamesA
GetOEMCP
GetModuleHandleA
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetCurrentProcessId
GetCommandLineA
GetCommState
GetAtomNameW
GetACP
lstrcmpiA
UnhandledExceptionFilter
SetEvent
SetComputerNameExA
SetCommMask
ReleaseMutex
ReadFile
CloseHandle
CompareStringA
CreateMailslotA
EnumDateFormatsA
ExitProcess
FlushInstructionCache
LocalLock
ole32
StringFromGUID2
CreateAntiMoniker
CoTaskMemFree
CoTaskMemAlloc
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CLSIDFromString
dbghelp
SymLoadModule
DbgHelpCreateUserDump
SymEnumerateSymbolsW
SymGetModuleInfo64
comctl32
DrawStatusTextW
FlatSB_SetScrollPos
FlatSB_SetScrollProp
GetEffectiveClientRect
GetMUILanguage
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_SetFlags
ImageList_Write
UninitializeFlatSB
DrawInsert
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ