Static task
static1
Behavioral task
behavioral1
Sample
73fe2ccb755f2993d3812a76335690b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
73fe2ccb755f2993d3812a76335690b4.exe
Resource
win10v2004-20231215-en
General
-
Target
73fe2ccb755f2993d3812a76335690b4
-
Size
2.2MB
-
MD5
73fe2ccb755f2993d3812a76335690b4
-
SHA1
495c9fd82d7dd8e1a740bd2b08d6e912fa485f94
-
SHA256
e4f616fe8c75e69dadef87dacc8c12657c3cf7061a94790f9f16e4d4228ab7b9
-
SHA512
3e26975054808899735581ef51e156e758f8deeb6946401a3a13bd7a4b75c1155f4249ce03b2b8682c8dee6a57c5616793c82510b24f770a7924ca15c5e8a596
-
SSDEEP
24576:u+2F925p5DwGMaDNi2cxV9kqbH8P0k3DA0Jihkuq+ILXwte:52F9w5Dw4D3c+qbcckzA0iB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73fe2ccb755f2993d3812a76335690b4
Files
-
73fe2ccb755f2993d3812a76335690b4.exe windows:4 windows x86 arch:x86
f0ab0b21a2fabcffd7fb20f8f7f35eff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Destroy
ImageList_Remove
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_GetDragImage
ImageList_Draw
ImageList_Create
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_LoadImage
ImageList_GetIcon
ImageList_Merge
ImageList_Read
ImageList_Copy
InitCommonControls
ImageList_DragShowNolock
advapi32
RegCreateKeyExW
RegQueryValueExA
RegReplaceKeyA
RegCreateKeyExA
RegLoadKeyA
RegReplaceKeyW
RegEnumValueW
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExW
RegQueryValueW
RegDeleteValueW
RegOpenKeyExA
RegFlushKey
RegEnumKeyExW
RegEnumKeyW
RegEnumKeyExA
RegDeleteKeyW
RegLoadKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegOpenKeyExW
RegGetKeySecurity
RegQueryValueExW
RegQueryValueW
RegEnumKeyExW
RegQueryValueA
RegQueryInfoKeyW
RegCreateKeyExA
RegOpenKeyW
RegEnumValueA
RegQueryValueExA
RegEnumKeyW
RegQueryInfoKeyA
RegCreateKeyW
RegFlushKey
RegCreateKeyExA
RegReplaceKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueW
RegDeleteValueA
RegEnumValueA
RegOpenKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyA
RegLoadKeyW
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExW
RegEnumValueA
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyW
RegLoadKeyW
RegReplaceKeyA
RegEnumValueW
RegOpenKeyW
RegCreateKeyExA
RegReplaceKeyW
kernel32
GetCPInfo
OpenFileMappingA
ReadConsoleA
CopyFileA
SetLastError
DeleteFileW
ExitThread
GlobalFree
Sleep
FindFirstFileA
ReadFile
OpenFile
GetConsoleMode
GetStdHandle
CopyFileW
CopyFileExA
GetLastError
GetFileTime
CreateThread
Sleep
GetFileSize
ExitThread
DeleteAtom
GetCommandLineA
ReadConsoleW
CreateDirectoryA
GetStdHandle
WriteFile
OpenFile
OpenFileMappingA
GetLastError
GetComputerNameA
FindFirstFileA
ReadConsoleA
SetLastError
CopyFileA
CopyFileW
CopyFileExW
GetCPInfo
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: 4KB - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ