Static task
static1
Behavioral task
behavioral1
Sample
964861fc0585b80e78a34a5376a324ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
964861fc0585b80e78a34a5376a324ca.exe
Resource
win10v2004-20231215-en
General
-
Target
964861fc0585b80e78a34a5376a324ca
-
Size
294KB
-
MD5
964861fc0585b80e78a34a5376a324ca
-
SHA1
0c6239a344999c3b7a4084c85d8f698757f0c1bc
-
SHA256
09b8ce8fc3db2e6d624c360049864911f620e207ffc258738e285fa6a7ceea26
-
SHA512
6fa5a829b4765c3d0775baa77f102e90702d2d63546e59d98e8e9afdd6f652cb7c84187e1834bceffd811d263d0a9b5c0eafa84d3f11ee99e85ac15582a7ee92
-
SSDEEP
6144:7MzTIf2pbj17kOSRQdjSe0tEVNVcp6IzLqYIUo:wTI4h4OS1qcp3qT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 964861fc0585b80e78a34a5376a324ca
Files
-
964861fc0585b80e78a34a5376a324ca.exe windows:4 windows x86 arch:x86
4f996dcc8ff07ddd64b404b53429826f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDeferWindowPos
IsWindowVisible
GetDlgCtrlID
GetDlgItemInt
SendDlgItemMessageA
ShowWindowAsync
BringWindowToTop
DestroyWindow
GetNextDlgTabItem
MessageBoxIndirectA
ole32
OleRegEnumVerbs
DoDragDrop
CoGetStdMarshalEx
OleRegGetUserType
OleCreateEx
OleSetMenuDescriptor
CreateFileMoniker
OleSaveToStream
GetRunningObjectTable
OleDoAutoConvert
OleLoadFromStream
OleGetIconOfFile
CoGetObject
oleaut32
OleLoadPicturePath
kernel32
OpenEventA
GetModuleHandleA
GlobalHandle
SetEvent
ResumeThread
GetExitCodeThread
GlobalReAlloc
SuspendThread
GlobalFree
PulseEvent
VirtualAlloc
IsBadCodePtr
GetProcAddress
GetOEMCP
GetNumberFormatA
GetLocaleInfoA
GetACP
GetStartupInfoA
VirtualProtect
GetStringTypeA
MultiByteToWideChar
GlobalMemoryStatus
CreateSemaphoreA
CreateEventA
HeapCreate
msvcrt
__getmainargs
_XcptFilter
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
exit
_acmdln
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ