Static task
static1
Behavioral task
behavioral1
Sample
b782219d464de8b3a000b9a0c5916e40.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b782219d464de8b3a000b9a0c5916e40.exe
Resource
win10v2004-20240226-en
General
-
Target
b782219d464de8b3a000b9a0c5916e40
-
Size
171KB
-
MD5
b782219d464de8b3a000b9a0c5916e40
-
SHA1
7b4490837e2de578e60df9cf8cc54a955c7951b0
-
SHA256
58fc737a82d9a4644282f55ece1a2367868690c60a4b0110386cafcef66dd81a
-
SHA512
6b7bd9c24761dbdd3e375f1a87fb8d0f449cc0b8d4bc2bf365a09086f7dbfd3fa35df026c0cfce54b7e93680a6be9b39eaab1bf2dab35e7934d677a7d9156633
-
SSDEEP
3072:0/F0r/nsw6A+J26uo14TfgtKG5IsJ/e9Q8zlhDyK8dRRWkNhOX00lm4edjV:yy3v/aagMMIsJkQ8znyK8d+kqxm9j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b782219d464de8b3a000b9a0c5916e40
Files
-
b782219d464de8b3a000b9a0c5916e40.exe windows:4 windows x86 arch:x86
c52afc25c7f5cf9b5e687d84cf9af80c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryExW
GetConsoleCP
AddAtomW
HeapAlloc
WriteConsoleW
HeapFree
TlsSetValue
MapViewOfFile
UnmapViewOfFile
SetLastError
TlsFree
TlsGetValue
GetModuleHandleW
EnumResourceNamesA
TlsAlloc
CreateFileMappingA
CreateFileA
GetLastError
GetConsoleMode
GetModuleHandleA
CreateFileW
ExitProcess
FlushFileBuffers
VerLanguageNameA
GetProcessHeap
GetVersionExA
GetVersionExW
InterlockedDecrement
GetTempPathW
GetEnvironmentVariableW
InterlockedIncrement
Sleep
winmm
mciSendCommandW
sndPlaySoundW
setupapi
CM_Get_Depth_Ex
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
shlwapi
PathAddBackslashW
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ