Static task
static1
Behavioral task
behavioral1
Sample
ce8364a366242a7c434841d9b8ec52e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ce8364a366242a7c434841d9b8ec52e0.exe
Resource
win10v2004-20231025-en
General
-
Target
ce8364a366242a7c434841d9b8ec52e0.bin
-
Size
1.6MB
-
MD5
ce8364a366242a7c434841d9b8ec52e0
-
SHA1
fc7c02f81fbc429ec734e5e891d2f52720ad0f4e
-
SHA256
69f2166e491bee86058d76766b60c763c9f34bd35ac899227dd5a15ecd71f8ac
-
SHA512
0e371daa0113f2574c8cc708d56465504473f77a995def4e873a5a42a743bc1af20802109ce66598c1f32072a764502e887bb31d2abbd385557e57da93e93cbc
-
SSDEEP
24576:jyzyXHDTsIxBHIHZt/E1VsClg52P48Mc4qVFQKQde3y84zfSJ4lL0XCKOo:AK38KW84zfSR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce8364a366242a7c434841d9b8ec52e0.bin
Files
-
ce8364a366242a7c434841d9b8ec52e0.bin.exe windows:4 windows x86 arch:x86
ff6c37bce9b0607d791a145bf754797d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmSetOpenStatus
ImmGetContext
ImmReleaseContext
kernel32
WaitForSingleObject
GetFileTime
GlobalFree
GlobalAlloc
WriteFile
SetFileTime
CreateThread
GetFileSize
CreateFileA
CreateEventA
FileTimeToSystemTime
GetTickCount
DeviceIoControl
GetPrivateProfileIntA
SetFilePointer
GetFullPathNameA
GetPrivateProfileStringA
ReadFile
CloseHandle
OutputDebugStringA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
MapViewOfFile
GetLocalTime
SetPriorityClass
GetEnvironmentStrings
CreateMutexA
GetWindowsDirectoryA
DeleteFileA
UnmapViewOfFile
CreateFileMappingA
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
InitializeCriticalSection
WaitForMultipleObjects
QueryPerformanceCounter
QueryPerformanceFrequency
GetDriveTypeA
GetLogicalDriveStringsA
GetVersionExA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetProcAddress
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
GetCPInfo
FlushFileBuffers
GetACP
GetOEMCP
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetStringTypeW
SetEndOfFile
user32
GetWindowLongA
DestroyWindow
LoadImageA
ShowWindow
SetWindowLongA
SendMessageA
CreateWindowExA
GetWindowTextA
SetFocus
CallWindowProcA
MessageBoxA
GetDC
GetCursorPos
wsprintfA
SetActiveWindow
MoveWindow
GetWindowRect
RegisterClassExA
LoadCursorA
GetSystemMetrics
UpdateWindow
WaitMessage
DispatchMessageA
TranslateMessage
GetMessageA
MsgWaitForMultipleObjects
PeekMessageA
DefWindowProcA
PostQuitMessage
ShowCursor
ClientToScreen
DrawTextA
ReleaseDC
GetMenu
GetClientRect
GetParent
SetCursor
SetWindowPlacement
AdjustWindowRectEx
GetWindowPlacement
RegisterClassA
GetClassInfoA
UnregisterClassA
PostMessageA
LoadIconA
gdi32
CreateCompatibleDC
BitBlt
DeleteDC
GetObjectA
CreateFontA
DeleteObject
SetTextColor
SetBkMode
GetStockObject
StretchBlt
GetPaletteEntries
SelectObject
ole32
CoInitialize
CoUninitialize
CoCreateInstance
dinput
DirectInputCreateEx
dsound
ord1
ddraw
DirectDrawCreateEx
DirectDrawEnumerateExA
Sections
.text Size: 776KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ