Static task
static1
Behavioral task
behavioral1
Sample
072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57.exe
Resource
win10v2004-20240802-en
General
-
Target
072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57
-
Size
22KB
-
MD5
35e1da9d75172743eaa20a006ebf281a
-
SHA1
03194e6f9732b414e4c5a391de553e0ba77d6fb2
-
SHA256
072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57
-
SHA512
975e6a18acad06a467afbb3ffeeb553d0041013b5f4be1dba84739ad4f6d078a0062b38c724ca1c1e125afbdc89af8992b3dd90a3c04c7ea911940115e23b9bf
-
SSDEEP
384:2p/c7+UldIjKDKYJZd1WwKoYe68ZS6jKFWY:A/E+UlejKbjWwKtUZS6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57
Files
-
072c2e99429b7b3b0e421fd54911241d2eabeadd2dfe89d92899a2b406a48b57.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ