Static task
static1
Behavioral task
behavioral1
Sample
prod (1).exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
prod (1).exe
Resource
win10v2004-20231025-en
General
-
Target
prod (1).exe
-
Size
26KB
-
MD5
a4d3dd9c6888e43cb4437ad3e280d987
-
SHA1
bfd2f0f6805fe3569ba54d6284d55eadef888a41
-
SHA256
c74163156fadd747dc5969c649ec1d705f29704cee02253065597fbc3757691c
-
SHA512
e250bcf5027be508541aa4b0cdafa1391839a54dc7d2e04c35a384b6c7e8239cf5d0dc8f43d6431f51942de7f8f7413ce939243f4d7a9000a72b89aa62b7a194
-
SSDEEP
192:QSAo/WP2AfMud+KzOu7HXWRZCXBdpuW2h7goFcrraIVqORuBrbg8tcvOG1fWXOMn:PAf3IK7ysRShliQSbyhuLg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource prod (1).exe
Files
-
prod (1).exe.exe windows:6 windows x86 arch:x86
1af256cdda90b6a39efe3581b1228baf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexImage2D
glRects
glGenTextures
glTexParameteri
glBindTexture
wglCreateContext
wglMakeCurrent
wglGetProcAddress
wglDeleteContext
glFinish
kernel32
ExitProcess
GetModuleHandleA
user32
ChangeDisplaySettingsA
ShowCursor
MessageBoxA
AdjustWindowRect
ReleaseDC
GetDC
GetSystemMetrics
DestroyWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
PeekMessageA
GetAsyncKeyState
gdi32
ChoosePixelFormat
CreateFontA
CreateSolidBrush
SelectObject
SetBkColor
SetPixelFormat
StretchDIBits
SetTextColor
TextOutA
SwapBuffers
Sections
.introFr Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.codeInM Size: 1024B - Virtual size: 989B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 210B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fragSha Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ppShade Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.introSt Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.grrls Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE