Static task
static1
Behavioral task
behavioral1
Sample
75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33.exe
Resource
win10v2004-20241007-en
General
-
Target
75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33
-
Size
242KB
-
MD5
bf0d3d77d6defafe7d8f70629aa948a5
-
SHA1
6b06081b9565483870801773280fdb2efb87f65c
-
SHA256
75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33
-
SHA512
ed95921957252104a0c9a0a6550219ad47c72d29c499b12d5f35ebac28994c26d9006d608409ca33e1f5c94124cad9acf2144ba6396de1a16a282b85d3fd7565
-
SSDEEP
3072:F5Vf7omj5iChNXuHGny4ljDG1Vrp4Zn5WalrGaJYDsjVXZC8BEYoRV:F5Vf+ChNXuHGny4ljS1Rpm5LtoH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33
Files
-
75a6e0c8316cd6bb7d6b91e02ae4cd1810ff90ce0453f6c8e0373a370f3e4a33.exe windows:5 windows x86 arch:x86
b945eb5df3b615aa974357093606bb13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
DbgPrint
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
comctl32
CreateStatusWindowW
InitCommonControlsEx
kernel32
DeleteCriticalSection
EnterCriticalSection
FindResourceW
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrlenW
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_assert
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_vsnwprintf
_wcmdln
_wcsicmp
abort
calloc
exit
fprintf
free
fwrite
malloc
memmove
signal
strncmp
swprintf
vfprintf
wcscmp
wcscpy
wcslen
shell32
ShellAboutW
winmm
PlaySoundW
mixerClose
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetNumDevs
mixerOpen
mixerSetControlDetails
gdi32
CreateFontW
DeleteObject
GdiGetCharDimensions
GetDeviceCaps
SelectObject
user32
AdjustWindowRect
CheckDlgButton
CheckMenuItem
CreateWindowExW
DefWindowProcW
DestroyWindow
DialogBoxParamW
DispatchMessageW
EnableMenuItem
EnableWindow
EndDialog
GetClassLongW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetDlgItemTextW
GetMenu
GetMessageW
GetWindowLongW
GetWindowPlacement
GetWindowRect
LoadCursorW
LoadIconW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
PostQuitMessage
RegisterClassExW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetRectEmpty
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
UnregisterClassW
wsprintfW
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 48KB - Virtual size: 47KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ