Static task
static1
Behavioral task
behavioral1
Sample
765e7c536aaca5b29228227b7e4c0c54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
765e7c536aaca5b29228227b7e4c0c54.exe
Resource
win10v2004-20231215-en
General
-
Target
765e7c536aaca5b29228227b7e4c0c54
-
Size
257KB
-
MD5
765e7c536aaca5b29228227b7e4c0c54
-
SHA1
d4aac6b46ae174d4adff8c114ab4eb6f957f2ce8
-
SHA256
bcde1a1b358288bda4eeb85088703c509df57719c60b5417d4c1c56bdc631d24
-
SHA512
580318010e0f98419eea5a40d11d933280bb10a05d918edd331b57b5fd054b1141465b8c1ab3dfba99d633416496f0ec248398156d38f297ca1ea5a411848efa
-
SSDEEP
6144:SNCMjUidDzOW8qGt8WP9Itvy5UnByKtIr89VhsKCAArs5Jn7u:SkMjFOW8q6JVItvtnB4rWhsKCAArs5JK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 765e7c536aaca5b29228227b7e4c0c54
Files
-
765e7c536aaca5b29228227b7e4c0c54.exe windows:4 windows x86 arch:x86
28c78c7ce0a9cf31df18307eeecb3e63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
RtlUnwind
CreateSemaphoreW
Module32First
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore
oleaut32
OleSavePictureFile
OleCreatePropertyFrame
SafeArrayPtrOfIndex
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 149KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 282B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ