Static task
static1
Behavioral task
behavioral1
Sample
79d5cbaabe96b930debf137ed53e1c68.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79d5cbaabe96b930debf137ed53e1c68.exe
Resource
win10v2004-20231215-en
General
-
Target
79d5cbaabe96b930debf137ed53e1c68
-
Size
314KB
-
MD5
79d5cbaabe96b930debf137ed53e1c68
-
SHA1
c935a70b6ed65c14df8822da4c93b7e5e416952f
-
SHA256
b7c87a07e6bf4755f5023982f4056b60216b2916f29172a9626c8e33104a9e67
-
SHA512
2df310ea74c4761b880a4429274eee2e7ec2f3d0ad9d9d9bead929708ac9f9f42c017a023fe54ea4689e971988ff9ab879b14489ad47b39a9b771f48ad9d2f70
-
SSDEEP
6144:u5sY0XB0Yl8tlJVp6qpQTQntTrQT2CiUuRdFyVGLzTvQbSPRV/g9p/z+0cD3TxBC:is+TVbp7ntT8T2CiUuRdmCzTdD/Kc0ca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d5cbaabe96b930debf137ed53e1c68
Files
-
79d5cbaabe96b930debf137ed53e1c68.exe windows:4 windows x86 arch:x86
b640551e4c2fd277bc547b05c6b3e917
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
secur32
GetUserNameExW
kernel32
GetProcessHeap
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
HeapFree
ExitProcess
LockResource
lstrcatA
lstrlenW
GetProcessHeap
HeapAlloc
advapi32
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey
RegSetValueExA
ole32
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CreateOleAdviseHolder
user32
TrackPopupMenuEx
GetWindowTextLengthA
ClientToScreen
FindWindowA
EnableMenuItem
EnumWindowStationsW
EndDialog
SetRectEmpty
GetWindowTextA
CreateDialogIndirectParamA
MessageBoxA
RegisterClassA
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.venue Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ