Static task
static1
Behavioral task
behavioral1
Sample
0b5c4724871558ea7eba964937683960N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0b5c4724871558ea7eba964937683960N.exe
Resource
win10v2004-20240709-en
General
-
Target
0b5c4724871558ea7eba964937683960N.exe
-
Size
446KB
-
MD5
0b5c4724871558ea7eba964937683960
-
SHA1
8dbce2717a056f704fd4ea048402496a72c7d03f
-
SHA256
a72949f1d35989c70233e4b7683151142d0d3bc8eb29223a8ca3e1b389d556f7
-
SHA512
0cbf15e58109aa5fbee2980c79547233a12433afef9ee1e1ff28afc0c9a9d6e3856f39aba619bf93d83029b43d9bfe1ac4b9ca96781835aa188fe3041ff68a23
-
SSDEEP
12288:R8Wb5lKmVA95xtf6BtGM6c4MQfLXitXJFhraVmrg748FCOCNYwVP8idjEpsaQ3It:as58mOpBatG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5c4724871558ea7eba964937683960N.exe
Files
-
0b5c4724871558ea7eba964937683960N.exe.exe windows:4 windows x86 arch:x86
7eb0297eb108890454276bc739ebe456
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateStatusWindowA
ImageList_DrawIndirect
ImageList_Remove
CreateMappedBitmap
ImageList_Add
ImageList_SetFlags
CreateStatusWindowW
ImageList_SetDragCursorImage
ImageList_GetImageRect
InitCommonControlsEx
ImageList_SetImageCount
DrawStatusText
CreateUpDownControl
DrawStatusTextW
GetEffectiveClientRect
ImageList_GetFlags
ImageList_AddMasked
shell32
SHEmptyRecycleBinA
user32
SetWindowPlacement
GetCaretPos
InvalidateRgn
ShowCursor
RegisterClassExA
SetClassWord
SetClassLongW
ExitWindowsEx
SetLastErrorEx
RegisterClassA
GetClassLongW
RegisterClassW
DrawMenuBar
EnumDisplaySettingsExW
RegisterClipboardFormatW
EndPaint
LookupIconIdFromDirectoryEx
DefWindowProcW
GetDialogBaseUnits
SendIMEMessageExA
GetKeyState
SendMessageTimeoutA
gdi32
PolyDraw
OffsetClipRgn
SetWorldTransform
Arc
GetTextFaceA
SaveDC
GetMetaFileW
DeviceCapabilitiesExA
GetWindowExtEx
CreateDCA
SetRectRgn
CreateCompatibleBitmap
GetGlyphOutlineW
LPtoDP
GetMiterLimit
PolyTextOutW
PathToRegion
DeleteDC
ExtCreatePen
CreateBitmapIndirect
GetBitmapBits
GetCharWidth32A
GetDeviceGammaRamp
GetDeviceCaps
EnumFontFamiliesW
FillPath
kernel32
GetStringTypeW
GetModuleHandleA
HeapSize
GetFileType
DeleteCriticalSection
GetCommandLineA
LeaveCriticalSection
InitializeCriticalSection
WriteFile
GetProcAddress
HeapReAlloc
GetSystemInfo
EnterCriticalSection
SetHandleCount
IsValidCodePage
ReadFile
FreeEnvironmentStringsW
VirtualFree
CompareStringW
GetEnvironmentStringsW
TerminateProcess
SetLastError
CompareStringA
GetCurrentProcessId
FlushFileBuffers
CloseHandle
GetLastError
EnumSystemLocalesA
GetTickCount
OpenMutexA
HeapDestroy
LCMapStringW
GetVersionExA
ExitProcess
GetTimeFormatA
VirtualAlloc
VirtualProtect
QueryPerformanceCounter
GetACP
LCMapStringA
GetCurrentThread
GetDateFormatA
LoadLibraryA
GetCurrentThreadId
HeapCreate
UnhandledExceptionFilter
GetCurrentProcess
GetLocaleInfoW
HeapLock
SetStdHandle
SetFilePointer
GetUserDefaultLCID
MultiByteToWideChar
IsBadWritePtr
GetSystemTimeAsFileTime
GetCPInfo
InterlockedExchange
GetProcAddress
HeapFree
HeapAlloc
TlsFree
GetTimeZoneInformation
TlsGetValue
GetEnvironmentStrings
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoA
FreeEnvironmentStringsA
GetStartupInfoA
GetOEMCP
TlsSetValue
RtlUnwind
GetStdHandle
IsValidLocale
SetEnvironmentVariableA
TlsAlloc
CreateMutexA
GetModuleFileNameA
VirtualQuery
Sections
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ