Static task
static1
Behavioral task
behavioral1
Sample
d63a2b776aaf9ba5ca9397d1167276da.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d63a2b776aaf9ba5ca9397d1167276da.exe
Resource
win10v2004-20240226-en
General
-
Target
d63a2b776aaf9ba5ca9397d1167276da
-
Size
14KB
-
MD5
d63a2b776aaf9ba5ca9397d1167276da
-
SHA1
20ab82dddf12c0b6fe31918ec746233356bfa4a8
-
SHA256
c056abac65e9a577b7229fd59ed626ceab02f2d76860238e8a98686eab1f97be
-
SHA512
d095702de7ef30aa9cd8d3d8d053b93ead13f5f82ea9063c4c8e5e790fae17b5d554d2ee28db3967ad1ce52331c544e44f7e19604070f977af00442757a40571
-
SSDEEP
192:pItUxF5FlnfnF4pc4wwCICyCYo21NSf3fkfNwURmsspZ5rxPR:uUrjxfnV4wh4yvUNjRmF5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d63a2b776aaf9ba5ca9397d1167276da
Files
-
d63a2b776aaf9ba5ca9397d1167276da.exe windows:4 windows x86 arch:x86
c3000233ae0fc6c59f094ed7b30d950b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
CreateEventW
DefineDosDeviceA
EscapeCommFunction
ExitProcess
GetAtomNameA
GetCommState
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetLongPathNameW
GetPrivateProfileSectionA
GetProfileSectionW
GetStringTypeW
GetVersionExW
HeapCreate
IsBadReadPtr
IsSystemResumeAutomatic
LCMapStringA
LocalShrink
OpenFile
ResetEvent
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetThreadPriority
UTUnRegister
UnlockFile
WaitCommEvent
WriteProfileSectionA
user32
BeginDeferWindowPos
ChangeDisplaySettingsW
CreateAcceleratorTableW
CreateIcon
DdeDisconnect
DrawTextExA
EnumDisplayDevicesA
GetClassLongA
GetClipboardData
GetForegroundWindow
GetKBCodePage
GetNextDlgTabItem
GetProcessDefaultLayout
InSendMessage
IsChild
LoadMenuA
MapWindowPoints
MessageBoxExW
SendMessageCallbackA
SetCaretPos
SetClassLongA
SetMenuDefaultItem
SetSystemCursor
SetWindowPlacement
TranslateAcceleratorA
ValidateRgn
VkKeyScanExA
WindowFromDC
gdi32
CreateICA
CreateSolidBrush
EnumFontsA
ExtSelectClipRgn
GdiPlayDCScript
GetBitmapBits
GetCharWidth32A
GetColorSpace
GetEnhMetaFileHeader
GetKerningPairs
GetStockObject
GetSystemPaletteEntries
LPtoDP
LineTo
OffsetClipRgn
PolyPolyline
Polyline
RectVisible
RestoreDC
SetBkMode
SetFontEnumeration
SetGraphicsMode
SetMetaRgn
SetTextCharacterExtra
SetTextJustification
SetViewportOrgEx
SwapBuffers
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE