Static task
static1
Behavioral task
behavioral1
Sample
76b4df48cac8cf045c26141619cc5ba0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
76b4df48cac8cf045c26141619cc5ba0.exe
Resource
win10v2004-20231222-en
General
-
Target
76b4df48cac8cf045c26141619cc5ba0
-
Size
580KB
-
MD5
76b4df48cac8cf045c26141619cc5ba0
-
SHA1
703f78a6a0af46ca5d6dbbf4e3622f091f12eaaf
-
SHA256
37076306db8dee751d2c59b3dc99361c1ca48976ddbe365f4c7af8661651313d
-
SHA512
82e36f3d34d6440613eeb83019ed9303b8c4733638f0490ae082d7cf2520dbcdff231f923981c0b3db3f6398ebfdcd49035e57f560bc6a308fd1692f01a43b09
-
SSDEEP
12288:QZgirn1SIzhK0S/PDPqWV0xF4a001rCZSKeGIc5B3r:egipvK0SLqWVeFT1dCZLkI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76b4df48cac8cf045c26141619cc5ba0
Files
-
76b4df48cac8cf045c26141619cc5ba0.exe windows:4 windows x86 arch:x86
7bbe5d0cf710ceb7e37f103ecdda0f99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
ImageList_SetIconSize
ImageList_SetFilter
ImageList_AddIcon
ImageList_Read
ImageList_Merge
ImageList_Write
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetFlags
InitCommonControlsEx
ImageList_Add
CreatePropertySheetPageW
DrawStatusTextA
InitMUILanguage
CreateUpDownControl
ImageList_DrawEx
ImageList_Replace
ImageList_GetIcon
ImageList_Destroy
ImageList_DragMove
user32
GetPropW
DdeFreeStringHandle
PostQuitMessage
GetTabbedTextExtentA
ScrollWindow
MsgWaitForMultipleObjectsEx
RegisterClassExA
GetClassInfoW
RegisterClassA
GetUserObjectInformationW
GetLastActivePopup
SetDoubleClickTime
DdeImpersonateClient
SetActiveWindow
DlgDirListW
RegisterClassW
CreateWindowExA
CreateDialogParamW
RemovePropW
DestroyWindow
ArrangeIconicWindows
GetClassLongW
ShowWindow
DdePostAdvise
LoadMenuIndirectW
DdeGetData
SetWindowContextHelpId
DefDlgProcW
DefWindowProcA
wsprintfW
MessageBoxA
CheckDlgButton
kernel32
GetModuleFileNameW
GetCurrentThreadId
WriteConsoleA
GetStringTypeA
EnterCriticalSection
FindResourceExA
VirtualQuery
HeapSize
DeleteCriticalSection
CloseHandle
VirtualAlloc
FreeEnvironmentStringsA
MoveFileA
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
GetTickCount
TlsAlloc
GetFileType
GetCommandLineW
LCMapStringW
GetCurrentProcessId
InterlockedDecrement
GetStartupInfoA
SetStdHandle
GetProcessHeap
TlsFree
GetModuleFileNameA
GetLocaleInfoA
GetLastError
IsValidLocale
CreateFileA
GetCurrentThread
GetCPInfo
GetModuleHandleA
LeaveCriticalSection
GetCurrentProcess
CreateMutexA
OpenMutexA
GetSystemTimeAsFileTime
EnumSystemLocalesA
CompareStringA
GetDateFormatA
SetEnvironmentVariableA
SystemTimeToFileTime
LoadLibraryA
GetConsoleOutputCP
GetVersionExA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStartupInfoW
GetLocaleInfoW
HeapCreate
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetStdHandle
HeapAlloc
GetTimeFormatA
SetLastError
FreeLibrary
SetConsoleCtrlHandler
Sleep
VirtualFree
TlsGetValue
ExitProcess
GetACP
WriteConsoleW
EnumTimeFormatsA
GetOEMCP
GetProcessHeaps
IsValidCodePage
MultiByteToWideChar
UnhandledExceptionFilter
CompareStringW
GetProcAddress
GetStringTypeW
TlsSetValue
GetCommandLineA
GetEnvironmentStringsW
QueryPerformanceCounter
GetEnvironmentStrings
SetHandleCount
SetFilePointer
TerminateProcess
ReadConsoleA
WriteFile
GetUserDefaultLCID
HeapDestroy
ReadFile
WideCharToMultiByte
IsDebuggerPresent
HeapFree
InterlockedIncrement
LCMapStringA
GetTimeZoneInformation
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ