Static task
static1
Behavioral task
behavioral1
Sample
d59a7c76986b8c5e10898db7870aca76.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d59a7c76986b8c5e10898db7870aca76.exe
Resource
win10v2004-20240226-en
General
-
Target
d59a7c76986b8c5e10898db7870aca76
-
Size
594KB
-
MD5
d59a7c76986b8c5e10898db7870aca76
-
SHA1
6d49a7d54ef94907d93e12aa5acc53c68fde729d
-
SHA256
d48329f78f082f4a1abe5b8df7703074e873d1c901504ee497c17c440fddfada
-
SHA512
e86090e513dd03b0f940156fdb6b4fde08a082a7e6ec194f89d7c6b6c65cf89a1ff2d3b84df9e269a3cf4d62d212b2b8b2188e2e42dd453d32f4d38d0b8d4c39
-
SSDEEP
12288:d7Q6hyJSLQsQVY5mlueQjvnGX7rwtU1kDNIogzYJhkR8SKb0vCbqz5uP:d7Qo8S8stanX7rwtQk3SYHkR8S/CbqdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d59a7c76986b8c5e10898db7870aca76
Files
-
d59a7c76986b8c5e10898db7870aca76.exe windows:4 windows x86 arch:x86
355d1fd18acde4017cad49b8f60d7d30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memmove
realloc
fseek
_fullpath
tolower
_strcmpi
_strtime
_itoa
_wctime
_XcptFilter
_ltoa
_adjust_fdiv
wcschr
ole32
OleDestroyMenuDescriptor
CoMarshalHresult
OleDuplicateData
CoGetObjectContext
CoInstall
OleCreateEx
CoGetMalloc
OleUninitialize
OleSetMenuDescriptor
OleCreateLinkToFileEx
CoGetStdMarshalEx
CoTreatAsClass
OleLockRunning
OleRegGetMiscStatus
gdi32
Ellipse
ExtTextOutA
StartDocA
BitBlt
EndPage
StartPage
SetBkColor
CreateRectRgn
RectInRegion
SetTextAlign
CreateRectRgnIndirect
Rectangle
CreateFontIndirectA
kernel32
InterlockedDecrement
lstrlenW
GetModuleFileNameA
DuplicateHandle
SizeofResource
EnumSystemLocalesA
GetCurrentThreadId
SetConsoleCtrlHandler
IsValidCodePage
EnterCriticalSection
CloseHandle
OpenProcess
GetTimeZoneInformation
WaitForMultipleObjects
GetACP
RtlUnwind
IsValidLocale
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ