Static task
static1
Behavioral task
behavioral1
Sample
73422a524594e39dd33d3599e82d3fa1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
73422a524594e39dd33d3599e82d3fa1.exe
Resource
win10v2004-20231222-en
General
-
Target
73422a524594e39dd33d3599e82d3fa1
-
Size
315KB
-
MD5
73422a524594e39dd33d3599e82d3fa1
-
SHA1
7d8bcdbbec5af9331ce076b00111c23f42b8bcdd
-
SHA256
f481d4c08472622365b7720ed8595ef5ae3278d292ec376836cd30f7764c6df6
-
SHA512
86e913deb3ab550767faf558e49a4accfbdb98b5f7b72990ea5a0811db7814cf63630a412a50906cc34d2955ce29449241e4b9b3233ca5e9bdeaa12520780b0d
-
SSDEEP
3072:BWGcLSffWT5TS8KC+an7np2EY1i2smZ0+ORSsEMI76Xn0RVHgvAhQ/CXPZ7CRDpK:dq5Gur3gWQWZI72Jvh6P5IRL/MGP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73422a524594e39dd33d3599e82d3fa1
Files
-
73422a524594e39dd33d3599e82d3fa1.exe windows:4 windows x86 arch:x86
fe431b3dca5ce13d101e5e2d0c0d1d36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
ExitProcess
CreateTimerQueue
PulseEvent
OpenMutexA
HeapFree
CreateEventA
LeaveCriticalSection
TlsSetValue
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
InSendMessage
PostQuitMessage
RegisterClassA
GetTopWindow
GetDesktopWindow
ole32
CoCreateInstance
CoUninitialize
CoInitialize
psapi
GetWsChanges
msvfw32
DrawDibStart
ICRemove
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE