Static task
static1
Behavioral task
behavioral1
Sample
f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88.exe
Resource
win10v2004-20231023-en
General
-
Target
f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88.bin
-
Size
1.3MB
-
MD5
6c13369286214dcd048a21951a148112
-
SHA1
a6b97eb56282ebdab965318f749556af34820c56
-
SHA256
f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88
-
SHA512
0292bfa1444c4422d1f74949f7d2005f3e709fb94ff45c6dedbcd0ff0fe6cad63b896ad1fda0a6a23e974c656bb7f25f74992d0cb709ea67d03964e360d315d5
-
SSDEEP
24576:mLmxlK9+uD1HgO3EXQNnBVbY1jZ88AO3jaPwSSMpgDWpauVHT50p3r0rEH7A:w2KEiPEXyiddAOewBMiDGXHl078
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88.bin
Files
-
f52081e6efee06abd9f4d4cc7fdd77728ceed3d454df67e242b794cb7a03eb88.bin.exe windows:4 windows x86
a57560274422d9137cb242e66371ec4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
atol
_getdrive
strstr
_chdir
_getcwd
strchr
_purecall
memset
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
time
memcmp
memcpy
strcmp
strncmp
_chdrive
atoi
strcat
_mkdir
calloc
free
_strcmpi
strlen
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2
kernel32
CloseHandle
_llseek
OpenFile
_lread
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
CreateFileA
SetFilePointer
ReadFile
IsDBCSLeadByte
MultiByteToWideChar
WriteFile
WideCharToMultiByte
lstrcmpiA
GetVersion
FormatMessageA
GlobalAlloc
_lclose
GetLastError
GetDiskFreeSpaceA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
_lopen
GetWindowsDirectoryA
GetModuleHandleA
lstrcpynA
DeleteFileA
_lwrite
FreeResource
LockResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleFileNameA
GetTempPathA
GlobalLock
lstrcpyA
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalFree
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
lstrcatA
lstrlenA
SetErrorMode
DeviceIoControl
SystemTimeToFileTime
FileTimeToSystemTime
GetStartupInfoA
user32
SetCursor
EnableMenuItem
GetSystemMenu
SetWindowPos
GetSystemMetrics
SetWindowLongA
IsIconic
GetParent
SetFocus
MessageBeep
DestroyWindow
OemToCharA
CharNextA
CharToOemA
CharUpperA
CharPrevA
MessageBoxA
GetDesktopWindow
GetWindowRect
LoadStringW
LoadStringA
DrawTextA
CreateDialogParamW
CreateDialogParamA
DialogBoxParamW
DialogBoxParamA
GetClientRect
GetWindowLongA
EndPaint
BeginPaint
DrawFocusRect
LoadCursorA
DispatchMessageA
TranslateMessage
IsDialogMessageA
PeekMessageA
DestroyIcon
CreateIconIndirect
GetIconInfo
KillTimer
SetTimer
CreateWindowExA
LoadBitmapA
CheckDlgButton
PostMessageA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
InvalidateRect
GetScrollRange
CharLowerA
GetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
wsprintfA
ShowWindow
EnableWindow
EndDialog
GetDlgItemTextA
GetDlgItem
SendMessageA
GetDC
SetRect
GetSysColor
FillRect
DefWindowProcA
SetWindowTextA
RegisterClassA
ReleaseDC
gdi32
SetBkColor
CreateSolidBrush
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetTextMetricsA
ExtTextOutA
SetTextColor
GetBkColor
BitBlt
SetBkMode
GetStockObject
DeleteObject
DeleteDC
comdlg32
GetSaveFileNameA
mpr
WNetGetUserA
WNetConnectionDialog
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ