Static task
static1
Behavioral task
behavioral1
Sample
62d2948a615c5c271ab73376e17f3cb0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62d2948a615c5c271ab73376e17f3cb0N.exe
Resource
win10v2004-20240709-en
General
-
Target
62d2948a615c5c271ab73376e17f3cb0N.exe
-
Size
350KB
-
MD5
62d2948a615c5c271ab73376e17f3cb0
-
SHA1
9b77296d687f41160b07d04b6eb9978e58c31175
-
SHA256
ec4655346d339e5d691d8d4853e0cde92e7d53569f20291e5ab41e71d0fa364e
-
SHA512
f09fcab47be43759f8c7deb3c7e8fc52bcf80179043f610ab92e80b78b38f2bca7212b8c13f4045b95034b5414653a50e0fd8b23af7222496de8e17b87cfa452
-
SSDEEP
6144:7kbOznGfklco9vo8tlFfmh29971VBJF0RWL9XFJIAlAKg:8OzSWfTbVmU7VBJIWLaAlfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d2948a615c5c271ab73376e17f3cb0N.exe
Files
-
62d2948a615c5c271ab73376e17f3cb0N.exe.exe windows:4 windows x86 arch:x86
156fc6ddee5ee80d86fd3753479a17bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
IsDBCSLeadByte
GlobalDeleteAtom
GlobalAddAtomA
CreateProcessA
GetShortPathNameA
WriteProfileStringA
CopyFileA
SystemTimeToFileTime
GetFileTime
GetExitCodeProcess
SetFileAttributesA
GetFileAttributesA
SearchPathA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
GetUserDefaultLangID
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
GetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
lstrcatA
DeleteFileA
lstrlenA
FindResourceA
SizeofResource
LoadResource
LockResource
GetStartupInfoA
FreeResource
lstrcpynA
MultiByteToWideChar
lstrcmpA
lstrcpyA
SetFileTime
SetLastError
CloseHandle
LocalAlloc
CreateFileA
LocalFree
GetFileSize
ReadFile
SetFilePointer
GetLastError
GetVolumeInformationA
WriteFile
user32
SetFocus
CheckDlgButton
KillTimer
EndPaint
DrawIcon
BeginPaint
IsIconic
DestroyIcon
UnhookWindowsHookEx
SetWindowsHookExA
GetClassInfoA
GetSystemMetrics
SendDlgItemMessageA
SetTimer
CharNextA
GetDesktopWindow
GetWindowRect
GetDlgItem
EnableWindow
PackDDElParam
FreeDDElParam
GetDlgItemTextA
MoveWindow
PostMessageA
FindWindowA
WaitForInputIdle
SendMessageA
LoadIconA
SetWindowTextA
CharUpperA
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
DispatchMessageA
wsprintfA
CharLowerA
CharPrevA
EndDialog
MessageBoxA
GetWindowLongA
CallNextHookEx
DialogBoxIndirectParamA
SystemParametersInfoA
TranslateMessage
gdi32
SetMapMode
GetMapMode
comdlg32
GetOpenFileNameA
GetFileTitleA
advapi32
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
shell32
ShellExecuteA
crtdll
strchr
_global_unwind2
memcpy
exit
_local_unwind2
strrchr
atoi
memset
_exit
_XcptFilter
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ