Static task
static1
Behavioral task
behavioral1
Sample
36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c.exe
Resource
win10v2004-20241007-en
General
-
Target
36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c.exe
-
Size
134KB
-
MD5
b812169412154338aeb4dd8d5d0ca377
-
SHA1
19df617eb30b91220a14938acd0b7e91ebc5b392
-
SHA256
36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c
-
SHA512
9c621ccfd9271d852fef3f37d4fd8401459be136ab71074dedf2047a1a0b581a6c6c2f072be7f66d613b829956989b3374d89135319219f2e3b16b8177bf83ee
-
SSDEEP
1536:2XOAqenssH9SlVUPHlo9i7EBsjQkGZ6Qb21DNhviYkp9Zwejj5dEqtXdMdM1xW0U:eOmCz9QE2QSbQ1XBk03IikI7X32jSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c.exe
Files
-
36d26b262acee2d7d7d2caa0330c3c6d3b2bb2bfdeb2d6d0f70dda220fe1de2c.exe.exe windows:5 windows x86 arch:x86
8614775ce11ef5c4a83ebfef27912b7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
ClearCommBreak
LoadLibraryA
GetPrivateProfileIntW
HeapFree
GetFileAttributesA
GetCurrentProcess
VirtualProtectEx
ResumeThread
GetPrivateProfileSectionA
DeleteFileA
TlsGetValue
CreateEventW
DeviceIoControl
lstrlenA
CancelIo
GetDriveTypeA
GetStringTypeA
DeviceIoControl
OpenMutexA
GetTickCount
uxtheme
GetThemeSysSize
SetWindowTheme
CloseThemeData
GetThemeTextExtent
OpenThemeData
DrawThemeBackground
DrawThemeEdge
GetThemeTextMetrics
CloseThemeData
GetThemeColor
GetThemeBool
GetWindowTheme
IsThemeActive
odbctrac
TraceSQLAllocConnect
TraceSQLBindCol
TraceSQLAllocEnv
TraceSQLAllocStmt
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ