Static task
static1
Behavioral task
behavioral1
Sample
72dc74455bfec8f9d82ae4da8ad23e83.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72dc74455bfec8f9d82ae4da8ad23e83.exe
Resource
win10v2004-20231215-en
General
-
Target
72dc74455bfec8f9d82ae4da8ad23e83
-
Size
29KB
-
MD5
72dc74455bfec8f9d82ae4da8ad23e83
-
SHA1
ef8282aff6ad914a1d672d2f215c5194d96b6b81
-
SHA256
6d575ba66810e0c8527008b484b725f394d2aa7c8eb9476b5627ee961580d971
-
SHA512
8d6333432ba72414596ffa24ead7f0f793cb9996354ff21f2a82d9313b3601c906a36acb4c552ffee485a252f76c294b8e5405fe6ff799d21fe15e88a44c283f
-
SSDEEP
768:d1frcg4aGfL3Yq6ecI7LOT3uAFVQf+lCTdfpUdZPJJadJWAE2q:d1frckQDr6v5z/3llC9pUdZRJaSAE2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72dc74455bfec8f9d82ae4da8ad23e83
Files
-
72dc74455bfec8f9d82ae4da8ad23e83.exe windows:4 windows x86 arch:x86
f9a6270f53026876a08f2dcec98b4bd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
IsWindow
advapi32
CryptHashData
shell32
Shell_NotifyIconA
urlmon
URLDownloadToCacheFileA
wininet
InternetGetConnectedState
ole32
CoCreateInstance
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
Sections
.text Size: 22KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE