Static task
static1
Behavioral task
behavioral1
Sample
d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236.exe
Resource
win10v2004-20240426-en
General
-
Target
d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236
-
Size
173KB
-
MD5
2bbc574f709608ba1e7f01d05e0bb3c5
-
SHA1
ff84ec5d0c686d51393b66d99eb16d02c505f11b
-
SHA256
d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236
-
SHA512
5716889a9856b3d46f7840222440397ce019e9f9cb160fbd7c595276957caf55d683097712a36d9bab478fcd8730da77e6bc78c61da3ce6a4c2ec9ea4b3fb157
-
SSDEEP
3072:wDTQGUHkkPkIyh7+ECwsIgH0xpnFmaDJUGMu5pV8W6NwMiS50bNas4ej:CdUUi/wpgHyMu55of50omj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236
Files
-
d768cd2236094ee7a037eaac54bfabf826aae150a1c32996559ffbd208c2d236.exe windows:4 windows x86 arch:x86
58186114fc2f437eaf5104a754d869a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetACP
VirtualAlloc
GetCurrentThread
GetOEMCP
user32
LoadCursorA
LoadCursorW
IsWindow
GetParent
GetDlgItem
EndDialog
MessageBoxW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
SendMessageW
EnumWindows
GetSystemMetrics
SetForegroundWindow
advapi32
RegOpenKeyA
Sections
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg22 Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ