Static task
static1
Behavioral task
behavioral1
Sample
979dbd3bde9c78ff582a1687a9b68064.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
979dbd3bde9c78ff582a1687a9b68064.exe
Resource
win10v2004-20231215-en
General
-
Target
979dbd3bde9c78ff582a1687a9b68064
-
Size
192KB
-
MD5
979dbd3bde9c78ff582a1687a9b68064
-
SHA1
3c2de3dc72a42e41b4574501a410ebcfd9300302
-
SHA256
8aeb2addbadf399781df230ec6084d87c77f694177f378d75b3cbb79a9f26c98
-
SHA512
10e9de26f9d610a3b1303496bf99843126502dec349054410c09d99373f61f82160fa84e61f57c91a89418b013f09bc9ce9499d4a4de3e5653199f9c0145f601
-
SSDEEP
3072:+uSEyoWe3USF/2Z9AkPZ29ucJUU3D6Hlmjgt31TSUIkS+sY3YaiKUJm3p1qKjeTy:fpi9SF/4eQU3DfcpwkeY3YaLqm3pcly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 979dbd3bde9c78ff582a1687a9b68064
Files
-
979dbd3bde9c78ff582a1687a9b68064.exe windows:4 windows x86 arch:x86
7e2a1716cffe05cc59a017ae0c48c3a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
LocalFree
SetLastError
GetLastError
FreeLibrary
HeapAlloc
VirtualAlloc
MultiByteToWideChar
GetModuleFileNameA
GetModuleFileNameW
LeaveCriticalSection
GetCurrentProcessId
GetCurrentProcess
lstrlenA
GetVersionExA
DisableThreadLibraryCalls
GetProcAddress
InterlockedDecrement
InterlockedCompareExchange
user32
ReleaseDC
LoadStringW
IsWindow
BeginPaint
wsprintfW
GetDlgItem
EnableWindow
SetForegroundWindow
SetCursor
SetWindowLongW
EndDialog
SetWindowPos
wsprintfA
PeekMessageW
InvalidateRect
DialogBoxParamW
SetTimer
GetSysColor
TranslateMessage
CharNextW
SendMessageW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
J2wR5THo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GRaAV5f8 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxC5KVr3 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
frsKlJv9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ