Static task
static1
Behavioral task
behavioral1
Sample
75134c8195006afaeb7886bd414f6373.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75134c8195006afaeb7886bd414f6373.exe
Resource
win10v2004-20231222-en
General
-
Target
75134c8195006afaeb7886bd414f6373
-
Size
305KB
-
MD5
75134c8195006afaeb7886bd414f6373
-
SHA1
da8078e36778ba80477d1cf6d95d42406d0db24c
-
SHA256
2ef83352790844e39705fc1c8c8c84fe76816b65c6a46cd5c7594e44e085d8e2
-
SHA512
5c7a27ea9f141c5051cae6d8873c1f593d996c4ead0b89d78b41cc1f32419c16dbed4809740b5136f72d60b50a929df37dcf848eb3d95782422dbd3279458118
-
SSDEEP
6144:f1mcWgS7mytYyLJIio0B6SnsHQxrO8DjICPp513y1MCpBGFVo:f1mMSzNIi/5nscIgf138vBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75134c8195006afaeb7886bd414f6373
Files
-
75134c8195006afaeb7886bd414f6373.exe windows:4 windows x86 arch:x86
58bc315907d66bd6874cde66e709755a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
msvbvm60
_CIcos
Sections
.text Size: 44KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE