Static task
static1
Behavioral task
behavioral1
Sample
770bb04b4cb42d1bbb43c69619c13bb9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
770bb04b4cb42d1bbb43c69619c13bb9.exe
Resource
win10v2004-20231215-en
General
-
Target
770bb04b4cb42d1bbb43c69619c13bb9
-
Size
404KB
-
MD5
770bb04b4cb42d1bbb43c69619c13bb9
-
SHA1
dee803cccfbbc543bab7d1f6b9a0bc00c096483a
-
SHA256
5f95e51dae105f769f3788c3d2cd3c929f90f90cc966938319f0a9a5227735ee
-
SHA512
dadbf81721b90fdd9ff9f8808638b78d49a13ac723ec1607478d0c9afe4e631c3c3ad4c68f54da2b585424d036e0253292d960c33951e90836d9237f9db01f5a
-
SSDEEP
6144:SoHjiEnAb5nIzP1TwSt2u6ME1w8dVXT1jbqqMmSxBh6m3+IzG7OB:SoHjiHbGzP10o9udD6xBh6cR2OB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 770bb04b4cb42d1bbb43c69619c13bb9
Files
-
770bb04b4cb42d1bbb43c69619c13bb9.exe windows:4 windows x86 arch:x86
53683e4523ff5432dc2f24770a47f56a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCaretBlinkTime
GetPropW
ArrangeIconicWindows
MapVirtualKeyW
CreateMDIWindowW
DrawFrame
GetMenuItemInfoA
DefMDIChildProcA
SetWindowPos
DefFrameProcA
DestroyWindow
DdeQueryConvInfo
GetAltTabInfo
GetWindowWord
RegisterClassA
BringWindowToTop
GetCaretBlinkTime
GetDlgItem
GetMenu
DrawFrameControl
AppendMenuW
SetCursorPos
HideCaret
DefWindowProcW
SetMessageQueue
UnregisterClassW
DdeQueryNextServer
MsgWaitForMultipleObjects
SetDlgItemInt
DrawTextExW
DdeCmpStringHandles
WINNLSGetEnableStatus
ShowWindow
SetPropA
BlockInput
GetMenuStringA
GetKBCodePage
AdjustWindowRectEx
GetClipboardOwner
SetWindowLongW
DdeCreateDataHandle
RegisterClassExA
TabbedTextOutW
IsDialogMessageW
LoadCursorFromFileA
GetKeyboardLayout
CreateWindowExA
MessageBoxW
CheckMenuItem
kernel32
GetLocaleInfoA
CreateMutexA
GetFileType
GetUserDefaultLCID
GetThreadTimes
ReadConsoleInputA
Sleep
GetLastError
WriteFile
GetProcessHeap
TlsGetValue
GetTimeFormatA
FreeEnvironmentStringsA
QueryPerformanceCounter
WideCharToMultiByte
TerminateProcess
WriteConsoleW
IsDebuggerPresent
GetStdHandle
GlobalGetAtomNameA
lstrcpynA
HeapFree
HeapAlloc
GetVersionExA
SetHandleCount
InterlockedDecrement
VirtualAlloc
FreeLibrary
CompareStringA
GetProcAddress
GetACP
GetTimeZoneInformation
LocalSize
GetConsoleOutputCP
IsValidCodePage
MultiByteToWideChar
CloseHandle
HeapReAlloc
HeapDestroy
VirtualQuery
SetStdHandle
TlsFree
TlsSetValue
GetConsoleMode
IsValidLocale
InitializeCriticalSection
GetOEMCP
CompareStringW
LoadLibraryA
OpenMutexA
CreateFileA
GetStringTypeA
HeapCreate
SetEnvironmentVariableA
ExitProcess
CreateWaitableTimerA
SetLastError
GetStringTypeW
GetCurrentProcessId
RtlUnwind
GetEnvironmentStrings
HeapSize
GetModuleFileNameA
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetCurrentThreadId
GetFileAttributesA
GetCurrentProcess
TlsAlloc
LCMapStringW
GetConsoleCP
UnhandledExceptionFilter
FlushFileBuffers
EnumSystemLocalesA
GetStartupInfoA
SetFilePointer
FillConsoleOutputCharacterA
ReadFile
InterlockedIncrement
GetModuleHandleA
EnterCriticalSection
GetCPInfo
SetConsoleCtrlHandler
GetLocaleInfoW
GetSystemTimeAsFileTime
InterlockedExchange
GetCurrentThread
LeaveCriticalSection
LCMapStringA
IsBadWritePtr
GetTickCount
GetDateFormatA
WriteConsoleA
GetCommandLineA
DeleteCriticalSection
GetNamedPipeInfo
LocalAlloc
VirtualFree
FreeEnvironmentStringsW
shell32
ExtractIconW
ShellExecuteW
DoEnvironmentSubstW
comctl32
GetEffectiveClientRect
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_Replace
ImageList_AddMasked
ImageList_DragEnter
ImageList_GetImageCount
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ