Static task
static1
Behavioral task
behavioral1
Sample
65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312.exe
Resource
win10v2004-20240412-en
General
-
Target
65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312
-
Size
51KB
-
MD5
c04623eff6a06413ba3b01558e30104a
-
SHA1
4a4a9bc569eb3af4569df6427e9fa58578fb5c12
-
SHA256
65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312
-
SHA512
e093ac04bcee22d527ff3946fa8a24a66469e5c3a61619d373f58a88468e92a555de404e214f1f9de109c70f07c51713e82aed2956c8f9bbe803b3c3d6f8e2f2
-
SSDEEP
768:oOY2HJSxb3HXBQFKV9V/vbwaoiwDtVSCYT:oeoxMKvV/kaefwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312
Files
-
65e9ebe8b9c1650ab1287510c242fb6a75191da6254ab36d866291f019628312.exe windows:5 windows x86 arch:x86
a21090861eaf9da8bfbcf13011318340
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipBitmapGetPixel
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDeleteGraphics
GdipCreateFromHDC
kernel32
FindResourceW
GetModuleHandleW
HeapFree
LockResource
SizeofResource
LoadResource
HeapAlloc
GetProcessHeap
OutputDebugStringW
lstrcatW
LoadLibraryA
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
user32
BeginPaint
GetClientRect
FillRect
EndPaint
DefWindowProcW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
GetMessageW
DispatchMessageW
InvalidateRect
wvsprintfW
SendMessageW
PostQuitMessage
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ