Static task
static1
Behavioral task
behavioral1
Sample
788056ee1fc33f9f407142c8d8c1320b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
788056ee1fc33f9f407142c8d8c1320b.exe
Resource
win10v2004-20231222-en
General
-
Target
788056ee1fc33f9f407142c8d8c1320b
-
Size
179KB
-
MD5
788056ee1fc33f9f407142c8d8c1320b
-
SHA1
6334701fa1e796c2e42ddb0148a4c371cc2eb05d
-
SHA256
00d9c5541206c9f98064d3ee3759a2038640a8dbc64e4f9220bfdb556f868a2c
-
SHA512
89917803ebb79cf3f670a6ac11af82cdfbb2bad817772cb501ad65b4c85058fe59e6fddc823e48072d8d1d13ca9c1e903fdffe18eedf9f229dc5a2f2c756287b
-
SSDEEP
3072:7rLGv2/5Nf5LTRQz9OD9UoKn5t3W7XuCfL+cJyUO9R8ZVSM5Iuqc7m34t6Is:PvTf5LdRUokia/cJyPgF5Qc7mIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 788056ee1fc33f9f407142c8d8c1320b
Files
-
788056ee1fc33f9f407142c8d8c1320b.exe windows:4 windows x86 arch:x86
861886d44ddb09945961ef381f1ab9b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
UnregisterConsoleIME
VirtualProtect
SetConsoleCP
GetThreadSelectorEntry
FoldStringW
SetVDMCurrentDirectories
GetEnvironmentVariableW
SetEnvironmentVariableA
GetExitCodeThread
GetLastError
SetProcessWorkingSetSize
SetCriticalSectionSpinCount
SetComputerNameW
SetHandleCount
PurgeComm
user32
EnumDisplayDevicesW
GetAltTabInfoW
AppendMenuA
CreateDialogParamW
LoadCursorFromFileA
DefMDIChildProcA
WCSToMBEx
GetAppCompatFlags
DeregisterShellHookWindow
RegisterClassA
RegisterClipboardFormatW
FindWindowExW
EnableMenuItem
SetMenuItemInfoW
GetMessageTime
ToAscii
SetCaretPos
GetClassLongW
GetFocus
DrawStateW
InsertMenuItemA
MapDialogRect
OemToCharA
SetPropW
LoadMenuA
DrawCaption
CreateWindowStationW
SetDlgItemInt
OpenDesktopA
AttachThreadInput
DlgDirListComboBoxW
GetAsyncKeyState
ChangeMenuW
TrackPopupMenuEx
SetCaretBlinkTime
DefDlgProcW
GetUpdateRgn
SendMessageCallbackA
DdeGetData
GetClassNameA
AlignRects
gdi32
EnumMetaFile
EngCreateDeviceSurface
GetCharacterPlacementA
CopyMetaFileW
SetPolyFillMode
GdiFixUpHandle
ArcTo
DeviceCapabilitiesExW
FONTOBJ_cGetGlyphs
MirrorRgn
SetRelAbs
XLATEOBJ_iXlate
PathToRegion
FixBrushOrgEx
GetClipRgn
GetETM
GetGlyphOutlineWow
GdiEntry4
GetCharABCWidthsFloatA
EngAlphaBlend
GetSystemPaletteEntries
StartDocW
GdiDeleteSpoolFileHandle
GdiEntry10
CreateRoundRectRgn
GetTextColor
GetBitmapDimensionEx
GetCharWidthI
ExtEscape
GetEnhMetaFilePixelFormat
PATHOBJ_bEnumClipLines
GetTextExtentPoint32W
comdlg32
ReplaceTextW
WantArrows
GetFileTitleA
dwOKSubclass
LoadAlterBitmap
GetSaveFileNameA
PageSetupDlgW
FindTextA
PrintDlgExA
GetOpenFileNameA
ChooseColorW
ChooseFontW
psapi
GetDeviceDriverBaseNameW
GetModuleFileNameExW
GetDeviceDriverFileNameW
GetWsChanges
GetMappedFileNameA
GetMappedFileNameW
GetModuleInformation
GetModuleFileNameExA
GetModuleBaseNameA
InitializeProcessForWsWatch
GetProcessMemoryInfo
EnumDeviceDrivers
EnumProcesses
GetModuleBaseNameW
QueryWorkingSet
comctl32
ImageList_SetOverlayImage
ImageList_Duplicate
ImageList_GetBkColor
ImageList_LoadImage
CreatePropertySheetPageW
DrawInsert
DllGetVersion
FlatSB_EnableScrollBar
CreateStatusWindowA
GetEffectiveClientRect
ImageList_Destroy
ShowHideMenuCtl
ImageList_Replace
ImageList_Copy
ImageList_SetIconSize
FlatSB_GetScrollRange
FlatSB_SetScrollPos
FlatSB_GetScrollPos
InitCommonControls
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_SetFilter
PropertySheetA
ImageList_SetBkColor
ImageList_Add
ImageList_AddMasked
CreateToolbar
FlatSB_SetScrollRange
DrawStatusTextA
ImageList_GetFlags
Sections
.text Size: 4KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE