Static task
static1
Behavioral task
behavioral1
Sample
dc864750ce373f5b116f0b2e57720c48.exe
Resource
win7-20240221-en
General
-
Target
dc864750ce373f5b116f0b2e57720c48
-
Size
287KB
-
MD5
dc864750ce373f5b116f0b2e57720c48
-
SHA1
35572efd585b1de5737c81554bc8342a896aaf0c
-
SHA256
4ed2308b10226f5dece77a9d581d19f52040d7108eb54106bc3beb8b1f23b954
-
SHA512
504b1edddba1cfd97cbe160ad08948b0e781edc0d0b249acca0afcaabefdf2463b9c031a6fc298cb7544490883e5101db8c4296aef452eb92b30a9e90e7c7977
-
SSDEEP
6144:wwYDnroY0Sszp1V8qipl5e7zqz7YFNJfbHz1zgCHyZ388bsXO7Y:8DnroGsNX8qi1e7zqHEPbhzgCHyqiCb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource dc864750ce373f5b116f0b2e57720c48
Files
-
dc864750ce373f5b116f0b2e57720c48.exe windows:4 windows x86 arch:x86
33ce7d8c9951142be786931aa1bd6f11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
PathIsFileSpecA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
kernel32
FindAtomA
OutputDebugStringW
WideCharToMultiByte
GetCurrentDirectoryW
MultiByteToWideChar
SearchPathW
LocalAlloc
ExitProcess
lstrcmpiW
VirtualProtect
SetEnvironmentVariableW
GetCurrentThreadId
lstrlenW
GetModuleFileNameW
LocalFree
SetLastError
EnumResourceLanguagesA
OutputDebugStringA
GetFileAttributesW
GetFileInformationByHandle
CreateDirectoryW
GetStringTypeExW
GetCurrentProcess
GetModuleHandleA
VirtualQuery
DuplicateHandle
InterlockedExchange
Sections
.text Size: 152KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ