Static task
static1
Behavioral task
behavioral1
Sample
77f7d3bb85d37f89e1913b3367b4850e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77f7d3bb85d37f89e1913b3367b4850e.exe
Resource
win10v2004-20231215-en
General
-
Target
77f7d3bb85d37f89e1913b3367b4850e
-
Size
1.3MB
-
MD5
77f7d3bb85d37f89e1913b3367b4850e
-
SHA1
49ce6701338954e8ca24e24f231907aab45003b8
-
SHA256
4ed9496ce9328d8248e3626dcaff0a3ff3786a8907344f995f608b8945823356
-
SHA512
5732ebd4995b450dfc4076cea7f0e826d356d6de6a6da400fe3179c86ee299b0bb7eaa774ff756f5a919ca70255be76dbf260a38f39f75c30ee7c5d0b0a081aa
-
SSDEEP
24576:ox0L6KTNyynWb+cQ4L+YRs7CQViEK7HjnifHohztmRFUghbOT58m8DR:omLQlQ4LpanUTjyHGztmRFUghrDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77f7d3bb85d37f89e1913b3367b4850e
Files
-
77f7d3bb85d37f89e1913b3367b4850e.exe windows:4 windows x86 arch:x86
add4fa168e6104e4fdc2e2b46365a92e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
tcalc
?Init@CalcInterface@@QAEHPAD000@Z
viewthem
?INFO_GetCjzxNum@@YAHXZ
invest
?SetPrivateInvestDir@@YAXPAD@Z
dbf
?OpenBase@@YAFPAUDBFINFO@@PADF@Z
ttools
MakeBuildNo
tlist
CreateNewTList
tinfo
I_HasJGData
tusercomm
DelUserCommModule
talgo
BufToDouble
tchart
?CreateNewTChart@@YAPAVVChart@@KPAUHWND__@@VCRect@@I@Z
tcomm
DirectConnect
mfc42
ord6675
msvcrt
_setmbcp
user32
GetMessageA
gdi32
GetObjectA
advapi32
RegCreateKeyExA
shell32
SHGetPathFromIDListA
comctl32
ImageList_DragMove
ole32
CoCreateInstance
oleaut32
SysAllocString
wsock32
WSACleanup
msvcp60
??_7ctype_base@std@@6B@
winmm
PlaySoundA
imm32
ImmIsIME
Sections
.text Size: 1.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE