Static task
static1
Behavioral task
behavioral1
Sample
76e514f60a2b2e17d18ffd55a5f3cc1b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
76e514f60a2b2e17d18ffd55a5f3cc1b.exe
Resource
win10v2004-20231222-en
General
-
Target
76e514f60a2b2e17d18ffd55a5f3cc1b
-
Size
318KB
-
MD5
76e514f60a2b2e17d18ffd55a5f3cc1b
-
SHA1
c92098fb1db4ffdff22c1b25aad40f8b0749a119
-
SHA256
4d931a4c1b22f749795dea2da058323c546e38c99dff18a461293eebc38933e9
-
SHA512
b4c36541ce199d14f7457d4cb2dd27cb0063ad18899b291da2f4e4a455edd47471ccc112ed3139ea76dd17fe5ed8ebb4aed24873aaf7967162d5cc2ac0699b9e
-
SSDEEP
6144:dWzfjlXWrZs4AcuNkYBDkt5gxwqLUd0slo19UIJY3cJYYY5iL2GIYC:dWzfjlmruNkAktoXLeLoze3cJrYQL2Gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76e514f60a2b2e17d18ffd55a5f3cc1b
Files
-
76e514f60a2b2e17d18ffd55a5f3cc1b.exe windows:4 windows x86 arch:x86
b0dcc959c0ad375ee2808b0ed1fab11b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
GetProcAddress
lstrcmpiA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
CloseHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
gdi32
GetTextCharset
shlwapi
ord437
icm32
ord13
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ