Static task
static1
Behavioral task
behavioral1
Sample
736ed68e4378b1e466177e896be557eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
736ed68e4378b1e466177e896be557eb.exe
Resource
win10v2004-20231222-en
General
-
Target
736ed68e4378b1e466177e896be557eb
-
Size
32KB
-
MD5
736ed68e4378b1e466177e896be557eb
-
SHA1
5a5d27a6ce60dc5f61a6a8ea4438509c5e0d6b14
-
SHA256
7c33e1a688e92b406147443f345eaf2c6f13207d143ac8292117c29ee2f43cb7
-
SHA512
ef10e75684b2ed82c84d8b04fbf2b81a2c24cbcc75e0f1c4a55b1aaf62f3fff37270a57e4aa147cc4c3f30b279bdc0ee2f8176690fec066a07f484b819d9760c
-
SSDEEP
768:IbXadVkmFnMBocRKZqJ2HKbu3MhPJJGWcfGz8ZC:ITaI5Boc00J2gucFc+oZC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 736ed68e4378b1e466177e896be557eb
Files
-
736ed68e4378b1e466177e896be557eb.exe windows:4 windows x86 arch:x86
77a83988a2a5c01b029df06d87dec6b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyW
RegOpenKeyExW
RegLoadKeyW
RegReplaceKeyA
RegCreateKeyW
RegDeleteValueA
RegQueryValueW
RegLoadKeyA
RegCreateKeyExA
RegDeleteValueW
RegEnumKeyW
RegQueryValueExW
RegFlushKey
RegOpenKeyA
RegLoadKeyA
RegEnumValueW
RegOpenKeyExW
RegLoadKeyW
RegQueryValueExW
RegQueryValueA
RegFlushKey
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyW
RegDeleteValueW
RegGetKeySecurity
RegEnumKeyExW
RegEnumValueA
RegDeleteKeyA
RegCreateKeyW
RegQueryValueExA
RegCreateKeyExA
RegEnumKeyW
RegOpenKeyA
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumKeyExA
RegLoadKeyW
RegGetKeySecurity
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueA
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegFlushKey
RegQueryValueW
RegDeleteKeyA
RegEnumKeyA
RegDeleteKeyW
RegEnumKeyExW
RegReplaceKeyW
RegGetKeySecurity
RegCreateKeyW
RegQueryValueExW
RegDeleteValueW
RegEnumValueA
RegOpenKeyW
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegOpenKeyExW
RegEnumKeyA
RegFlushKey
RegDeleteKeyA
RegOpenKeyA
gdi32
ExtTextOutA
CreateSolidBrush
BeginPath
GetPixel
CloseFigure
AddFontResourceA
ClearBitmapAttributes
AddFontResourceExW
BitBlt
GetBrushOrgEx
GetBitmapBits
AddFontResourceExA
AddFontMemResourceEx
AbortPath
AddFontResourceW
CopyMetaFileA
SetTextColor
GetClipBox
ExcludeClipRect
DeleteDC
GetCurrentPositionEx
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceExW
AddFontResourceW
GetPixel
CreateSolidBrush
AddFontResourceExA
RestoreDC
AddFontMemResourceEx
BitBlt
CloseMetaFile
AddFontResourceTracking
DeleteDC
GetBitmapBits
AbortPath
GetBrushOrgEx
GetPixel
CopyMetaFileA
ClearBitmapAttributes
ExtTextOutA
DeleteObject
comctl32
ImageList_LoadImage
ImageList_Merge
ImageList_AddIcon
ImageList_LoadImageW
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetIconSize
ImageList_DrawEx
InitCommonControls
ImageList_Copy
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_DragMove
ImageList_GetImageRect
ImageList_GetDragImage
ImageList_Read
ImageList_Remove
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_GetImageInfo
ImageList_Draw
InitCommonControls
ImageList_Copy
ImageList_EndDrag
ImageList_Merge
ImageList_Remove
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_Read
ImageList_DrawEx
ImageList_DragEnter
ImageList_DragMove
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetIcon
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ