Static task
static1
Behavioral task
behavioral1
Sample
75061c1443020392bb408d05e9e8203e.exe
Resource
win7-20231215-en
General
-
Target
75061c1443020392bb408d05e9e8203e
-
Size
182KB
-
MD5
75061c1443020392bb408d05e9e8203e
-
SHA1
83c5907f824aab2ebb3c76f81f2575fab2eb5eb9
-
SHA256
e0f046188e32e9793108675a8b8e8d389860c12cba5dda1b1d6c3510aa3b0689
-
SHA512
bdf7a7a2fc5a2ae9de2d348273eea84b7c285e971199602586d6e9c1867daaf36bc9217a4cb554452840ea06d06176a61cdfaf344553e29ed3bab8fb771968d3
-
SSDEEP
3072:TB2HmnnGG0yqG3jBOsdrrnPPw98kdW3yiQAkhYnXrHcnqlHYdOgvu5HG:F2GnCA3NlVrPI9AWhYnXr8qlHY3uRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 75061c1443020392bb408d05e9e8203e
Files
-
75061c1443020392bb408d05e9e8203e.exe windows:4 windows x86 arch:x86
3e7a9d6975d665d179da22c8ace0dd73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
ReleaseDC
SetCursor
GetWindowLongA
FillRect
GetSysColor
MoveWindow
LoadCursorA
SetWindowPos
GetDC
ReleaseCapture
GetWindowInfo
GetDlgItem
IsWindow
SetWindowLongA
SetCapture
winmm
mciSendCommandA
sndPlaySoundA
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
WideCharToMultiByte
InterlockedExchange
GetTickCount
GetCalendarInfoW
GetProcessHeap
WriteFile
CreateProcessA
GetCurrentProcess
CreateFileW
GetEnvironmentVariableA
lstrlenW
CloseHandle
HeapReAlloc
GetCurrentProcessId
GetThreadLocale
GetStartupInfoA
GetCurrentThreadId
Sleep
GetModuleHandleA
SetUnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
HeapAlloc
LoadLibraryW
EnumResourceNamesA
TerminateProcess
UnhandledExceptionFilter
HeapSize
lstrlenA
HeapDestroy
IsDebuggerPresent
GetLocaleInfoA
QueryPerformanceCounter
FindFirstFileW
HeapFree
GetStdHandle
LocalAlloc
GetSystemTimeAsFileTime
GetSystemTime
GetACP
RaiseException
SystemTimeToFileTime
InterlockedCompareExchange
lstrcpynW
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ