Static task
static1
Behavioral task
behavioral1
Sample
774d7a249a9e79ab4b1664af86f1424d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
774d7a249a9e79ab4b1664af86f1424d.exe
Resource
win10v2004-20231215-en
General
-
Target
774d7a249a9e79ab4b1664af86f1424d
-
Size
167KB
-
MD5
774d7a249a9e79ab4b1664af86f1424d
-
SHA1
d4281dbbdd46b0e4d2e064cb00d1bde241e1d291
-
SHA256
05cb7a7e9fbc51495d72040a1f5a17bcfc08a218bdff902818a488f6a6fe0fc2
-
SHA512
c3c04cee8a84ad3813e0274a232f99acb2e334a314994d4e777c0d50e735e8c5096cf2fb5db133f8d1f3ed97a737cc8ecb537e3e8fad77728e693bda114e1a46
-
SSDEEP
3072:6jQ6rxR9fCFL+TjURbqREOm260eUB54ro+u2A1JCVFdbHow0tiUvJ+/m/OSaQ:KQ6NR9fcL2jUYe260eUB2U+YuVFpHoJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 774d7a249a9e79ab4b1664af86f1424d
Files
-
774d7a249a9e79ab4b1664af86f1424d.exe windows:4 windows x86 arch:x86
86ccbcdf4f9247ce38ecb2368d813fa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GlobalUnlock
InterlockedExchange
GetModuleHandleA
lstrlenA
WaitForSingleObject
GetVersion
CompareFileTime
GetStdHandle
GetCommandLineA
WaitForMultipleObjects
HeapReAlloc
GetProfileIntA
GetSystemDefaultLangID
OpenMutexA
SuspendThread
HeapCreate
GetConsoleCP
VirtualProtect
CloseHandle
GetTickCount
user32
DrawCaption
SetPropA
MessageBoxA
SetScrollInfo
FindWindowA
InvertRect
CreateMenu
GetKeyState
EnableScrollBar
GetCursorInfo
CreateIcon
SetWindowPos
DestroyMenu
CopyImage
IsDialogMessage
InsertMenuA
DispatchMessageA
GetKeyboardLayout
DialogBoxParamA
DragObject
DispatchMessageA
GetDlgItem
CreateCursor
advapi32
RegCloseKey
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ