Static task
static1
Behavioral task
behavioral1
Sample
7c19839a179a8fec27356b29d162c4d5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c19839a179a8fec27356b29d162c4d5.exe
Resource
win10v2004-20231215-en
General
-
Target
7c19839a179a8fec27356b29d162c4d5
-
Size
26KB
-
MD5
7c19839a179a8fec27356b29d162c4d5
-
SHA1
01e77c485b2c450c23d9bc109169b0a5f8be7903
-
SHA256
de32248ae414a01f253e2422ad6d50c41d284bdba7913124072206ca84434fcc
-
SHA512
6cab361ed4a447bbd2fe4421c8bfad139aaca31790d6d8556d04b3ed767f76c2aa75a59b81895aac28038f22110a12b7cd8906c52b9d29cc04e8474daaf3e8e8
-
SSDEEP
384:vyfBl3AAx/kujHBD/B3o3/syMHiqmJ2ujoUC13hsmj/mN9LXuoX1xYpk3GWgvW17:vMP3FksD/a3LMHinMuj4hMzXuoXHxKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c19839a179a8fec27356b29d162c4d5
Files
-
7c19839a179a8fec27356b29d162c4d5.exe windows:4 windows x86 arch:x86
81770a979a96594a51f3450314112030
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
ole32
CoTaskMemFree
StringFromCLSID
shlwapi
StrCatBuffW
gdi32
IntersectClipRect
SetTextColor
DPtoLP
SetStretchBltMode
GetDeviceCaps
GetBkColor
SetBkColor
GetStretchBltMode
CreateFontIndirectW
DeleteDC
GetObjectW
SetViewportOrgEx
LPtoDP
ExcludeClipRect
GetBrushOrgEx
GetStockObject
CreateDIBSection
GetBkMode
LineTo
DeleteObject
Polyline
GetTextColor
GetCurrentObject
SetBrushOrgEx
CreateCompatibleDC
CreatePen
CreateSolidBrush
StretchBlt
RestoreDC
SelectObject
BitBlt
SaveDC
Rectangle
CreateCompatibleBitmap
Polygon
MoveToEx
OffsetViewportOrgEx
SetBkMode
advapi32
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegOpenKeyA
RegOpenKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
user32
TranslateMessage
GetMessageW
ReleaseCapture
SetCapture
InvalidateRect
LoadCursorW
IsWindow
LoadImageW
SetParent
IsWindowVisible
wsprintfW
KillTimer
BeginPaint
GetPropW
GetWindowDC
GetClientRect
ValidateRect
DrawIcon
ClipCursor
PostMessageW
GetParent
GetDC
SetFocus
GetSystemMetrics
ReleaseDC
GetDoubleClickTime
GetWindowRect
SetCursor
ScreenToClient
InflateRect
DestroyWindow
SetPropW
GetUpdateRect
UnregisterClassW
OffsetRect
DispatchMessageW
RegisterClassExW
EnumChildWindows
CreateWindowExW
PtInRect
EndPaint
GetDesktopWindow
SetTimer
MoveWindow
FillRect
GetWindow
ShowWindow
GetIconInfo
ClientToScreen
CallMsgFilterW
LoadStringW
GetCursorPos
PostQuitMessage
SetWindowPos
DefWindowProcW
WindowFromPoint
SendMessageW
kernel32
VirtualAlloc
GetTickCount
LCMapStringA
GetModuleFileNameW
RaiseException
SetHandleCount
GetCPInfo
lstrcmpiW
TlsAlloc
ExitProcess
SetUnhandledExceptionFilter
SetStdHandle
FileTimeToSystemTime
TlsFree
FlushFileBuffers
cfgmgr32
CM_Get_Version_Ex
CM_Move_DevNode
msi
MsiDatabaseExportW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE