Static task
static1
Behavioral task
behavioral1
Sample
752549c9ad9ee915a59bd96484feac55.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
752549c9ad9ee915a59bd96484feac55.exe
Resource
win10v2004-20231222-en
General
-
Target
752549c9ad9ee915a59bd96484feac55
-
Size
529KB
-
MD5
752549c9ad9ee915a59bd96484feac55
-
SHA1
5dff440809555f95bc0a9748c82cf0fff23b06ee
-
SHA256
a26d2a9c6a228f1009a1aa935be3c27ae723bc61f66ef59d16d949e9d682fba9
-
SHA512
ff5c52540046d80b9cf12b9fb0093663505542b321e13b1a61edfe423871effa258a10167b547785e9926d2a7e8faa608ed4e0506022b0e1cc0e4747b55fae43
-
SSDEEP
12288:Dm+lOXClpwXjqALgVBkYv6f5p+3kHD++GzWrsEUITEQUjlLg:DTlCXjlRfD+CXGzWYVITojl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 752549c9ad9ee915a59bd96484feac55
Files
-
752549c9ad9ee915a59bd96484feac55.exe windows:4 windows x86 arch:x86
5c63c66e4f456d140475a3f6b830877f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GdiGetBatchLimit
EnableEUDC
ExtTextOutA
GetEnhMetaFilePaletteEntries
SetMapMode
CreateColorSpaceW
DeleteObject
CreateCompatibleBitmap
GetSystemPaletteUse
PolyPolygon
TranslateCharsetInfo
GetTextCharacterExtra
CreatePolygonRgn
GetLogColorSpaceW
EnumFontsW
ChoosePixelFormat
UpdateICMRegKeyA
GetMiterLimit
CreateDiscardableBitmap
EnumObjects
GetCharABCWidthsA
CreateEllipticRgn
user32
SetSystemCursor
GetPropW
DlgDirListComboBoxW
MessageBoxW
SubtractRect
DdeDisconnectList
DefWindowProcA
UnregisterDeviceNotification
GrayStringA
DestroyWindow
DdeGetLastError
ScrollDC
RegisterClassW
SendNotifyMessageW
DrawTextExA
EndDialog
ShowWindow
EndTask
CreateMenu
RegisterClassExA
TranslateAccelerator
CreateWindowExW
IsIconic
RedrawWindow
DdePostAdvise
RegisterClassA
CopyImage
shell32
ExtractAssociatedIconW
SHGetFileInfoW
FindExecutableW
SHGetSpecialFolderPathA
kernel32
GetCommandLineA
GetStringTypeA
CloseHandle
GetModuleFileNameW
SetStdHandle
GetProfileIntW
GetUserDefaultLCID
EnumSystemLocalesA
LeaveCriticalSection
GetSystemDefaultLangID
QueryPerformanceCounter
GetTimeZoneInformation
InterlockedExchange
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetCurrentProcessId
LCMapStringA
GetCurrentThread
IsValidLocale
GetEnvironmentStrings
TlsAlloc
DeleteCriticalSection
LoadModule
GetStartupInfoW
CompareStringA
GetLocaleInfoW
GetStartupInfoA
HeapAlloc
SetVolumeLabelW
GetVersionExA
IsBadWritePtr
GetCommandLineW
SetEnvironmentVariableA
GetCPInfo
GetTimeFormatA
GetStringTypeW
VirtualAlloc
VirtualQuery
RtlZeroMemory
GetEnvironmentStringsW
FlushFileBuffers
SetHandleCount
WriteFile
GetStringTypeExA
GetSystemInfo
GetThreadSelectorEntry
FreeEnvironmentStringsA
GetPrivateProfileStructW
VirtualFree
TlsGetValue
ConvertDefaultLocale
LoadLibraryA
FindResourceA
IsValidCodePage
HeapDestroy
VirtualProtect
TlsSetValue
CompareStringW
WaitCommEvent
TlsFree
GetOEMCP
GetCurrentThreadId
GetLastError
lstrcatW
CreateMutexA
MultiByteToWideChar
ExitProcess
ReadFile
GetACP
GetModuleFileNameA
RtlUnwind
FreeEnvironmentStringsW
GetTickCount
OpenMutexA
GetStdHandle
TerminateProcess
HeapCreate
GetFileType
GetDateFormatA
HeapSize
GetModuleHandleA
EnterCriticalSection
HeapReAlloc
InitializeCriticalSection
CreateFileA
HeapFree
SetThreadContext
GetProcAddress
GetCurrentProcess
SetLastError
GetConsoleTitleA
UnhandledExceptionFilter
LCMapStringW
TryEnterCriticalSection
GetLocaleInfoA
advapi32
RegDeleteKeyA
InitiateSystemShutdownW
comctl32
InitCommonControlsEx
ImageList_Read
ImageList_GetImageRect
CreateStatusWindowW
ImageList_AddMasked
CreateStatusWindow
ImageList_SetOverlayImage
ImageList_GetFlags
GetEffectiveClientRect
ImageList_LoadImageW
ImageList_Draw
ImageList_LoadImageA
ImageList_BeginDrag
MakeDragList
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ