Static task
static1
Behavioral task
behavioral1
Sample
c767c407fa5f4b81395dfdfd1501aae5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c767c407fa5f4b81395dfdfd1501aae5.exe
Resource
win10v2004-20240226-en
General
-
Target
c767c407fa5f4b81395dfdfd1501aae5
-
Size
39KB
-
MD5
c767c407fa5f4b81395dfdfd1501aae5
-
SHA1
a31303f1dcc513223ba67998e437ae1134e22306
-
SHA256
d5de7ac076cf4a9c7c4b78bec4870910207a2540d4834ec4056243659ab5735d
-
SHA512
cc62df0b7c51fbedd4e70299e96e6252af7efb78a8050a365eae23b4748d10ab830dc2e18d66e67109882d0ee3274fa4643da8912157ff24f5d40e51aea580e9
-
SSDEEP
768:h0HhaYmMAiT5hIbb6KDS7/xhebEHX+hFQoA2eLGUhApy/x1hbIefknHYJ:h0HwFMAwcuKGth+l62eSUiE/6q24J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c767c407fa5f4b81395dfdfd1501aae5
Files
-
c767c407fa5f4b81395dfdfd1501aae5.exe windows:4 windows x86 arch:x86
c482532e1144cabcac8f8a78ba0b16e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsExA
ExitProcess
FindClose
FindResourceExA
GetBinaryTypeW
GetCPInfoExW
GetFileAttributesA
GetFileSize
GetPrivateProfileSectionA
GetProcessVersion
GetStringTypeExW
GlobalGetAtomNameA
RequestDeviceWakeup
VirtualQuery
lstrcpy
advapi32
BuildImpersonateTrusteeW
CryptDuplicateKey
CryptEncrypt
EnumServicesStatusA
GetAclInformation
GetCurrentHwProfileW
GetSidIdentifierAuthority
ObjectOpenAuditAlarmW
OpenBackupEventLogA
SetEntriesInAccessListA
user32
CopyImage
DialogBoxIndirectParamA
DragObject
DrawMenuBar
EnumDisplaySettingsA
EnumDisplaySettingsW
GetGUIThreadInfo
GetMenuStringA
LoadMenuIndirectA
MapDialogRect
RemoveMenu
RemovePropA
SendInput
SetCapture
TranslateMessage
shell32
ExtractAssociatedIconA
SHAppBarMessage
SHBrowseForFolder
SHLoadInProc
SheFullPathW
ShellExecuteExA
ShellHookProc
Shell_NotifyIconW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE