Static task
static1
Behavioral task
behavioral1
Sample
bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b.exe
Resource
win10v2004-20231020-en
General
-
Target
bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b
-
Size
172KB
-
MD5
413064924a2c04782da7c267a96a94ff
-
SHA1
732769a77289e9e64308bd57a9ecc836ee0d3c61
-
SHA256
bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b
-
SHA512
cf2b68418903153ac7c42c7f1197d52007fea2ab9a0316d32dfd4a4be06f791e1110de02d0c3e623f95c7832c32bd12f993d97d8e18534d44b4e553d5ac37ba6
-
SSDEEP
1536:lP/UdbtuqL+VPgo48NX6aScamA7aDHcxL:hUdbjSPgoDllScamA7abcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b
Files
-
bdb56d8769c6c42c2f890501a2769dad337e5f86f562da076cbdeec9982a457b.exe windows:4 windows x86
263d412f47870af0f92d619bd0cdad9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42d
ord1310
ord3069
ord3944
ord3670
ord2076
ord1566
ord5078
ord3002
ord4064
ord1344
ord4191
ord1830
ord1631
ord4205
ord2340
ord2481
ord2584
ord3691
ord2473
ord2585
ord2341
ord2432
ord2339
ord3143
ord3144
ord3142
ord2431
ord3367
ord3786
ord3658
ord1952
ord1228
ord4492
ord2875
ord684
ord574
ord736
ord492
ord317
ord728
ord1748
ord1766
ord1772
ord1747
ord1770
ord1757
ord1857
ord3524
ord619
ord565
ord382
ord306
ord4896
ord4615
ord4606
ord3281
ord880
ord4645
ord2068
ord2435
ord813
ord2634
ord2383
ord1790
ord4720
ord3287
ord2168
ord485
ord4061
ord823
ord734
ord1136
ord2044
ord901
ord487
ord1608
ord450
ord1768
ord5056
ord3803
ord3552
ord5077
ord3702
ord1880
ord1860
ord4415
ord3231
ord1033
ord4130
ord1789
ord2661
ord4227
ord4229
ord2104
ord3366
ord2078
ord4239
ord4215
ord4408
ord3784
ord3657
ord2021
ord1285
ord2986
ord706
ord528
ord2052
ord1787
ord714
ord3403
ord4403
ord4302
ord2295
ord1135
ord3432
ord1087
ord4676
ord1212
ord3355
ord3447
ord3070
ord4053
ord3960
ord646
ord1906
ord3201
ord5072
ord2324
ord454
ord4475
ord2993
ord413
ord3365
ord4756
ord1365
ord3640
ord4216
ord2024
ord1288
ord2863
ord596
ord559
ord3427
ord349
ord299
ord1809
ord2991
ord3553
ord1661
ord2659
ord1041
ord2517
ord1896
ord558
ord1934
ord877
ord3097
ord1729
ord298
ord3174
ord4566
ord449
ord2208
ord3889
ord4011
ord4231
ord3312
ord3400
ord3170
ord3690
ord3870
ord3867
ord3768
ord2123
ord4934
ord1922
ord3650
ord2972
ord496
ord688
ord3545
ord4932
ord5081
ord2612
ord4951
ord3291
ord1590
ord2370
ord4617
ord2385
ord1190
ord4208
ord3618
ord5076
ord4118
ord1781
ord4176
ord3651
ord1364
ord3362
ord4753
ord1862
ord3831
ord4017
ord3948
ord3629
ord3826
ord4195
ord1100
msvcrtd
strcmp
strlen
sprintf
__getmainargs
_initterm
_chkesp
_adjust_fdiv
_controlfp
_except_handler3
__set_app_type
__p__fmode
__CxxFrameHandler
__setusermatherr
_setmbcp
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_ftol
__p__commode
kernel32
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
LocalFree
LocalUnlock
LocalLock
LocalAlloc
LoadLibraryA
MoveFileExA
CloseHandle
GetFileSize
FreeLibrary
CreateFileA
GetSystemDirectoryA
GetModuleHandleA
user32
SetCursor
GetCursorPos
wsprintfA
MessageBoxA
GetSysColor
GetSystemMetrics
mfco42d
ord798
mfcd42d
ord298
ord273
ord537
ord365
ord893
ord862
ord860
ord857
ord280
ord790
ord931
ord408
ord310
ord541
ord956
ord305
ord436
ord662
ord829
ord774
ord745
ord796
ord792
ord420
ord646
ord645
ord951
ord831
ord929
ord405
ord515
ord808
ord841
ord495
mfcn42d
ord277
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ