Static task
static1
Behavioral task
behavioral1
Sample
751dd338d498ac3d0b13442f83582c7b.exe
Resource
win7-20231215-en
General
-
Target
751dd338d498ac3d0b13442f83582c7b
-
Size
9KB
-
MD5
751dd338d498ac3d0b13442f83582c7b
-
SHA1
9a241fa3b0818360672bfe5088519bcad32ff317
-
SHA256
9b421f4b76f092eeadf3102ff72522707461f79ef9d8165e80933c2502973700
-
SHA512
729b1cef0c5b3513ebbb24a3d353a8fde4a8beb1ddcc2aabfbb02ffc3d73f4b18c47c719a6b18fbf66cfbc55ccc6f4cd6b0db62c36357afd17b5478b79c80fbb
-
SSDEEP
192:dXYeTFEY302wV4YCbtHpROQqvkSSQHimzM3rm9iW9SVvG6uraU9:BFBE8F/RObsxqVQq9iWEvG6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 751dd338d498ac3d0b13442f83582c7b
Files
-
751dd338d498ac3d0b13442f83582c7b.exe windows:4 windows x86 arch:x86
0e251abb7ce0d24576144ddb30f9697d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeA
CompareStringA
CreateDirectoryW
ExitProcess
GetConsoleTitleA
GetCurrencyFormatW
GetFileSize
GetFullPathNameA
GetHandleInformation
GetTickCount
GlobalHandle
GlobalLock
InterlockedCompareExchange
LCMapStringA
LocalAlloc
OpenWaitableTimerW
OutputDebugStringW
PrepareTape
RtlFillMemory
SetFileAttributesA
SetProcessPriorityBoost
SetThreadPriority
TlsFree
WriteProfileStringA
user32
CharLowerA
CharUpperW
CreateCursor
DdeSetUserHandle
EnumPropsExA
EnumPropsExW
GetWindow
HideCaret
InvalidateRect
IsWindowUnicode
LoadIconA
LookupIconIdFromDirectoryEx
ModifyMenuW
PeekMessageW
RegisterWindowMessageA
SetSysColorsTemp
SetWindowTextA
ShowOwnedPopups
SystemParametersInfoW
UnregisterHotKey
WINNLSGetIMEHotkey
gdi32
Arc
CreateBitmap
CreateICW
DeleteMetaFile
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
GdiGetBatchLimit
GetBrushOrgEx
GetCharABCWidthsW
GetClipRgn
GetMetaFileBitsEx
GetNearestColor
GetSystemPaletteUse
GetTextMetricsA
GetViewportOrgEx
InvertRgn
LineTo
OffsetClipRgn
PaintRgn
PlayMetaFile
PolyPolyline
ScaleWindowExtEx
SetFontEnumeration
SetICMProfileA
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ