Static task
static1
Behavioral task
behavioral1
Sample
74c34b8b1331d8353a41a51a4a3fc090.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74c34b8b1331d8353a41a51a4a3fc090.exe
Resource
win10v2004-20231215-en
General
-
Target
74c34b8b1331d8353a41a51a4a3fc090
-
Size
684KB
-
MD5
74c34b8b1331d8353a41a51a4a3fc090
-
SHA1
039e389545b183fec0a7224f65b79c1d97a7cd38
-
SHA256
28ac031392071296115c47f46ad1135a6e9029220c51afeaf78443630106a39b
-
SHA512
5137f26b4ceb3c9f436dd191240cdeb9136d230f8c22a7f583c3595d67de7543994b795efe6f5798639a2736b7d19c023a69e7e5739b5497720ea58295898a3f
-
SSDEEP
12288:cmBJqGbNCGgBMVZNbOd7D6D642zAvYLAcG4/heDCyq3xRDMSxCPou:niqNbOU642EALh95eD1yfCPou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c34b8b1331d8353a41a51a4a3fc090
Files
-
74c34b8b1331d8353a41a51a4a3fc090.exe windows:4 windows x86 arch:x86
c7453ff7220942565c54579b50dfc671
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
GetCharWidthFloatA
StrokePath
PtVisible
SetPolyFillMode
CreateRoundRectRgn
Rectangle
GetWinMetaFileBits
CreatePalette
CreateCompatibleBitmap
Polygon
SetArcDirection
GetStockObject
SetWorldTransform
PolyDraw
GetBitmapDimensionEx
SetPixelV
GetCharABCWidthsA
Pie
Polyline
UpdateICMRegKeyA
ScaleWindowExtEx
comctl32
InitCommonControlsEx
kernel32
GetDateFormatA
InterlockedDecrement
LoadLibraryW
GetModuleHandleA
EnumSystemLocalesA
GetEnvironmentStringsW
GetCurrentProcessId
GetCPInfo
GetStartupInfoA
IsValidCodePage
IsBadReadPtr
IsDebuggerPresent
GetCurrentProcess
GetTimeFormatA
lstrlenA
GetEnvironmentStrings
VirtualAlloc
RaiseException
GetStringTypeW
GetStdHandle
OutputDebugStringA
CompareStringA
HeapReAlloc
GetStringTypeA
DebugBreak
GetCompressedFileSizeA
UnhandledExceptionFilter
FlushFileBuffers
HeapFree
GetConsoleCP
PulseEvent
CreateDirectoryExW
QueryPerformanceCounter
GetVersionExA
ExitProcess
GetTickCount
GetCurrentThread
WideCharToMultiByte
GetModuleFileNameA
TerminateProcess
DeleteCriticalSection
HeapDestroy
GetLocaleInfoA
GetLocaleInfoW
LCMapStringW
SetHandleCount
ReadConsoleOutputAttribute
LoadLibraryA
MultiByteToWideChar
LeaveCriticalSection
GetOEMCP
TlsSetValue
GetUserDefaultLCID
FreeEnvironmentStringsW
FreeLibrary
SetUnhandledExceptionFilter
FindAtomA
GetCommandLineW
WriteFile
GetCommandLineA
GetLastError
GetACP
IsValidLocale
VirtualQuery
GetProcAddress
SetConsoleCtrlHandler
InterlockedExchange
TlsAlloc
SetLastError
VirtualFree
SetFilePointer
GetConsoleMode
CompareStringW
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedIncrement
GetConsoleOutputCP
WriteConsoleW
WriteConsoleA
HeapAlloc
UnlockFile
GetTimeZoneInformation
TlsFree
GetFileType
EnterCriticalSection
TlsGetValue
LCMapStringA
ContinueDebugEvent
GetCurrentThreadId
GetProcessHeap
FreeEnvironmentStringsA
CreateMutexA
EnumCalendarInfoExA
HeapValidate
GetStartupInfoW
CreateFileA
HeapCreate
SetEnvironmentVariableA
OutputDebugStringW
EnumSystemCodePagesA
InitializeCriticalSection
CloseHandle
ReadFile
SetStdHandle
OpenMutexA
RtlUnwind
user32
MonitorFromPoint
PostThreadMessageW
CopyRect
CharUpperW
SetWindowPlacement
MapVirtualKeyA
UnionRect
SetUserObjectInformationA
InvalidateRect
CreateAcceleratorTableA
GetProcessDefaultLayout
GetMessageExtraInfo
GetIconInfo
EnumPropsExA
RegisterClassA
CascadeWindows
LoadMenuW
MessageBoxIndirectA
DdeSetQualityOfService
GetScrollBarInfo
RegisterClassExA
SetTimer
Sections
.text Size: 455KB - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ