Static task
static1
Behavioral task
behavioral1
Sample
65ee145048b7ff0c16f9d64e91532310N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65ee145048b7ff0c16f9d64e91532310N.exe
Resource
win10v2004-20240802-en
General
-
Target
65ee145048b7ff0c16f9d64e91532310N.exe
-
Size
284KB
-
MD5
65ee145048b7ff0c16f9d64e91532310
-
SHA1
36e2b2125f20ff38261a50c255af32b79ae85f3d
-
SHA256
67a973e212adeb7c1901a9c4305fe3473d00fb31eb112665df1218924b6f1b04
-
SHA512
53534c9c04a724526b962ea17e5170bd3d946702cc2c72a3e745e49e01fb5d4c87a319a2afab0128a2784cb4fbd4ed77ce350f166dcba237cf30203f700676b6
-
SSDEEP
6144:aG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:F/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ee145048b7ff0c16f9d64e91532310N.exe
Files
-
65ee145048b7ff0c16f9d64e91532310N.exe.exe windows:4 windows x86 arch:x86
4d2efee6f5edd66280cb0c8846157bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCurrentThread
GetACP
InterlockedExchange
DeleteAtom
GetThreadPriority
GetExpandedNameA
HeapCreate
VirtualProtect
WriteConsoleA
GetModuleHandleA
FlushFileBuffers
GetCurrentProcess
GetTimeFormatA
GetStdHandle
GetEnvironmentStringsA
FormatMessageA
LoadLibraryA
IsDebuggerPresent
GetCurrentProcessId
HeapDestroy
user32
EndPaint
ShowWindow
wsprintfA
GetCursorPos
FillRect
DragDetect
GetDlgItem
GetWindowTextLengthA
GetParent
GetWindow
GetClassNameA
BeginPaint
DrawTextA
SetActiveWindow
GetFocus
ReleaseDC
FrameRect
GetTitleBarInfo
SetForegroundWindow
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegEnumKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ