Static task
static1
Behavioral task
behavioral1
Sample
a0769f5a6a58b214d7a1d23c8e0fab8d.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a0769f5a6a58b214d7a1d23c8e0fab8d.exe
Resource
win10v2004-20240221-en
General
-
Target
a0769f5a6a58b214d7a1d23c8e0fab8d
-
Size
111KB
-
MD5
a0769f5a6a58b214d7a1d23c8e0fab8d
-
SHA1
d5f9b44e42f94ee8a202ba28095d04b198b7aa7a
-
SHA256
e8c9f0b109adef2d77880d33e7a609793e5eee38790ccca14107a5be4d5b0ab7
-
SHA512
213ae6de877053f6f878124a305f610d24a7aecfec06a4345702e123231db880acf7dec84bcfc941f00682047b503084ad8e8bc50b1a297fee488a1c27546f56
-
SSDEEP
3072:iBeO8Cf63vvSoUTPg05PjLx8DgKFEyl3GDc/9bjLmXB3UDo/d:iBexvyDc/9bjLmWk/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0769f5a6a58b214d7a1d23c8e0fab8d
Files
-
a0769f5a6a58b214d7a1d23c8e0fab8d.exe windows:4 windows x86 arch:x86
d1b072b40247a31132e72bc916e375ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePen
GetPixel
SaveDC
SelectPalette
SetTextColor
GetStockObject
GetTextMetricsA
DeleteObject
CreatePalette
DeleteDC
CreateSolidBrush
GetDeviceCaps
LineTo
RectVisible
SetStretchBltMode
PatBlt
SelectObject
RestoreDC
GetObjectA
GetClipBox
CreateFontIndirectA
SetTextAlign
SetMapMode
CreateCompatibleDC
SetPixel
user32
GetSystemMetrics
TranslateMessage
GetParent
CharNextA
GetDesktopWindow
kernel32
lstrcmpiA
GetWindowsDirectoryA
DeleteFileW
GetVersion
GetModuleHandleW
GetTickCount
GetStartupInfoA
GetACP
GetCurrentProcessId
GlobalFindAtomW
GetModuleHandleA
MulDiv
lstrlenA
IsDebuggerPresent
lstrcmpiW
GetCurrentThreadId
GetProcessHeap
CopyFileA
GetUserDefaultLangID
SetCurrentDirectoryA
RemoveDirectoryA
DeleteFileA
GetCurrentThread
lstrcmpA
GetCommandLineW
GetOEMCP
GetDriveTypeA
GetConsoleOutputCP
GetCurrentProcess
GlobalFindAtomA
GetThreadLocale
RemoveDirectoryW
GetCommandLineA
lstrlenW
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ