Static task
static1
Behavioral task
behavioral1
Sample
d7479eee20398526a4570c8d7ccbf63f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7479eee20398526a4570c8d7ccbf63f.exe
Resource
win10v2004-20240226-en
General
-
Target
d7479eee20398526a4570c8d7ccbf63f
-
Size
162KB
-
MD5
d7479eee20398526a4570c8d7ccbf63f
-
SHA1
e5e18377f163e1eaaa1faa70668cf3dc8ccad9f4
-
SHA256
e2f6477ec51c551b972b037b8c13150d32aec23c91cdf8bc1ed631f7126b722e
-
SHA512
2ec4ec502a5ba72abcf5aa0ec6a9749891c577f56aa13edb1579282fd55f3cb87530af64fa0ad11b8fcdd7d78821e857f69165ab02509770e315e187a0d74b7e
-
SSDEEP
3072:oc5f2D9qJSYGO9Gio0wIufpO7up7I0Rr0ytFYsel324:ocUhASYVAiqO7upDR9Y32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7479eee20398526a4570c8d7ccbf63f
Files
-
d7479eee20398526a4570c8d7ccbf63f.exe windows:4 windows x86 arch:x86
1605eaed388d187ef3e01a559f1c1e76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ReleaseCapture
UpdateWindow
IsWindow
DestroyWindow
SetCapture
ValidateRgn
IsWindowEnabled
FlashWindow
ExcludeUpdateRgn
EnableWindow
RealGetWindowClassA
ValidateRect
InvalidateRgn
GetCapture
GetUpdateRgn
kernel32
FindResourceW
SetEnvironmentVariableW
FindFirstFileW
GetSystemDirectoryW
ConvertFiberToThread
FindClose
CompareStringA
SetThreadIdealProcessor
GetStringTypeW
LocalAlloc
GetOEMCP
FileTimeToLocalFileTime
SystemTimeToFileTime
EnumResourceNamesW
GetShortPathNameW
GetCurrentProcess
LocalFree
FindNextFileW
FreeLibrary
GetLocalTime
LCMapStringW
RegisterWaitForSingleObject
FileTimeToSystemTime
SetErrorMode
LoadResource
SetCurrentDirectoryW
LocalFileTimeToFileTime
IsBadReadPtr
SearchPathW
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ