Static task
static1
Behavioral task
behavioral1
Sample
cae84695f068ecc47a5136ecdc7e0950_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cae84695f068ecc47a5136ecdc7e0950_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
cae84695f068ecc47a5136ecdc7e0950_exe32.exe
-
Size
300KB
-
MD5
cae84695f068ecc47a5136ecdc7e0950
-
SHA1
405a88c4c124330c3f83a4bf28d3c026fae898d5
-
SHA256
2ca8a83535927bef3537b303cfb7581548ac0313c15a99c16db113b25e56a3bc
-
SHA512
7961b04ecb1b4a79b367edcf570955a34e1558165e09ffce1f58529c88b201f627eb21f5841e455fa3f6ed451f1362454f90af447f5a6b086b7da1683c4b54e5
-
SSDEEP
6144:OozNlR1n/d8WD9/iCozNlR1n/d8WD9/iOii3ii:pRlR1n18WD5i1RlR1n18WD5iOl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cae84695f068ecc47a5136ecdc7e0950_exe32.exe
Files
-
cae84695f068ecc47a5136ecdc7e0950_exe32.exe.exe windows:4 windows x86
f3ca32988b73cb3bff92fc98b3181bf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ord2
MCIWndCreateA
kernel32
LCMapStringA
MultiByteToWideChar
LCMapStringW
lstrcpyA
SetHandleCount
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetStringTypeW
user32
AdjustWindowRect
EndDialog
InvalidateRect
wsprintfA
SetWindowTextA
DrawMenuBar
BeginPaint
EndPaint
IsIconic
MoveWindow
PostQuitMessage
GetWindowLongA
DialogBoxParamA
DefWindowProcA
EnableMenuItem
GetWindowRect
SendMessageA
SetWindowPos
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBeep
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetMenu
ShowWindow
UpdateWindow
DestroyWindow
MessageBoxA
LoadStringA
comdlg32
GetOpenFileNameA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ