Static task
static1
Behavioral task
behavioral1
Sample
2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f.exe
Resource
win10v2004-20231025-en
General
-
Target
2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f
-
Size
246KB
-
MD5
b35b04e38d6e451b300520aa16b4f4ec
-
SHA1
fbe315e8fa7abc671e0cec5f82827b5074db80c2
-
SHA256
2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f
-
SHA512
a6c14debc9e15a50e88cdfc35e401fe8efe02eb2c7093555111841f5dbe9d032ade9d2149474eacb4d3118b198254878fcc846bb1c427c52e0b44d0005d3f4ea
-
SSDEEP
6144:iGo/1tvs/JK+6ast7hvY/GC+8cCVd/JDkpJySdgi8:iA/UasvY/G54kpJySdj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f
Files
-
2aa094a020239334d335d3197d9418ebbc949bf7d429f87459e15c69569dca4f.exe windows:4 windows x86
ab23dece4a40788369a8f8c57759f206
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lread
GetNumberOfConsoleInputEvents
_lread
shell32
CommandLineToArgvW
SHGetSpecialFolderLocation
SHChangeNotify
user32
ReleaseDC
GetMessagePos
SetCursor
TrackPopupMenu
MoveWindow
MessageBoxW
TranslateAcceleratorA
ClientToScreen
GetWindowTextA
LoadImageA
GetNextDlgGroupItem
InvalidateRect
GetClassNameA
IsDialogMessageA
SetDlgItemTextW
GetWindowRect
GetMenuItemInfoW
UpdateWindow
RegisterClassA
DdeKeepStringHandle
DeleteMenu
SetForegroundWindow
SetClassLongA
GetWindowTextLengthA
GetKeyState
SetWindowLongA
GetCursorPos
DrawIcon
SetTimer
SystemParametersInfoA
GetMenu
FrameRect
InvalidateRgn
SetDlgItemInt
DefDlgProcA
EnableMenuItem
ScreenToClient
DialogBoxParamA
LoadCursorW
DrawTextA
CharLowerBuffA
SetMenu
SetWinEventHook
LoadStringW
LoadAcceleratorsA
CharLowerW
msvcrt
_controlfp
_tzset
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
getc
_Getmonths
mblen
gdi32
PlgBlt
RealizePalette
GetGlyphOutlineA
GdiComment
GdiFlush
GetCharABCWidthsW
Pie
LineTo
SetEnhMetaFileBits
GetTextExtentExPointA
DeleteMetaFile
SetViewportOrgEx
DeleteEnhMetaFile
EndPath
CreateDCW
SetBkMode
DeleteObject
SetArcDirection
GetPaletteEntries
GetCurrentObject
GetEnhMetaFileHeader
SetBkColor
GetSystemPaletteEntries
PathToRegion
SetWindowExtEx
GetCharWidthW
StretchDIBits
AddFontResourceA
GetRegionData
PolylineTo
GetArcDirection
CreateScalableFontResourceA
SelectPalette
GetWindowExtEx
GetGraphicsMode
GetGlyphOutlineW
GetCharWidth32W
CreateHalftonePalette
WidenPath
PolyPolygon
CreatePatternBrush
GetTextFaceW
GetPath
GetKerningPairsA
SetWindowOrgEx
GetEnhMetaFileBits
CreatePalette
GetEnhMetaFileDescriptionA
GetDIBColorTable
SetBitmapBits
GetDeviceCaps
SetDIBColorTable
CloseMetaFile
GetCharWidth32A
GetTextExtentPointW
PtInRegion
SetROP2
CreateFontIndirectA
MaskBlt
OffsetRgn
CreateRectRgn
GetWindowOrgEx
PtVisible
ExcludeClipRect
GetClipRgn
SetPolyFillMode
GetEnhMetaFileDescriptionW
RemoveFontResourceA
ChoosePixelFormat
SetPaletteEntries
CopyMetaFileW
SetTextAlign
DPtoLP
EnumFontFamiliesW
EndPage
GetDCOrgEx
GetCharacterPlacementW
AbortPath
SelectClipPath
SetPixelFormat
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ