Static task
static1
Behavioral task
behavioral1
Sample
aee0e1c394996f63d572bdb89cd0bfd0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
aee0e1c394996f63d572bdb89cd0bfd0.exe
Resource
win10v2004-20231215-en
General
-
Target
aee0e1c394996f63d572bdb89cd0bfd0
-
Size
431KB
-
MD5
aee0e1c394996f63d572bdb89cd0bfd0
-
SHA1
b472a27eb6e30cc9078cc5dc10c33b26178a0f25
-
SHA256
267cdc1b369cbae3dbacb9f702db574c82c2d04aee5eb5fc13ac13b07feca59c
-
SHA512
f65cf415b2523801cc6806582155b924be513df0925e85f41856e7fb13c2794ed39ba72f9c373d2fa8c719a364ec3d19c72ce7850b3f5aa37b3bd980b61a317a
-
SSDEEP
6144:8KgPIOujU3fpQkF96C1fOSC/yioNTZs4eakgjbgO8dpM6Ut/zV:IPIrU3fekTh2SCf+LeakebgO8zMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aee0e1c394996f63d572bdb89cd0bfd0
Files
-
aee0e1c394996f63d572bdb89cd0bfd0.exe windows:4 windows x86 arch:x86
1aec7fdee51a15f6394a42b15fcf748f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetClipRgn
GetCurrentObject
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetGraphicsMode
GetMapMode
GetMetaRgn
GetNearestColor
GetNearestPaletteIndex
GetPixelFormat
GetPolyFillMode
GetTextCharset
GetTextColor
SetSystemPaletteUse
SetTextCharacterExtra
kernel32
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTickCount
GetVersion
GlobalSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_gcvt
_itoa
_ltoa
_putw
_strdup
_stricoll
_strlwr
_strnicmp
_strrev
_write
__doserrno
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__p__winmajor
__p__winminor
__set_app_type
_beep
_cexit
_chgsign
_ctime64
_ecvt
_errno
_fcvt
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_getmaxstdio
_getw
_gmtime64
_iob
_itoa
_memicmp
_mktime64
_onexit
_putws
_seterrormode
_setmaxstdio
_setmode
_snwprintf
_stat64
_strlwr
_strncoll
_strupr
_time64
_unlink
_wcsicoll
_wcslwr
_wgetenv
_wpopen
_wputenv
_wremove
_wrename
_wtempnam
_wtol
abort
atexit
atof
atoi
atol
calloc
clearerr
clock
exit
fclose
fflush
fgetwc
fopen
fprintf
fputc
fputs
fputws
free
fscanf
fwprintf
fwrite
getenv
isspace
localeconv
log
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
putwc
rand
realloc
rename
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncpy
strstr
swscanf
system
tolower
vfprintf
wcslen
wcstombs
user32
CheckDlgButton
DrawTextA
EndDialog
GetCursor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetForegroundWindow
GetInputState
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuState
GetQueueStatus
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
IsWindowEnabled
IsWindowUnicode
PostMessageA
RemovePropA
SendMessageA
SetDlgItemTextA
SetFocus
SetWindowTextA
ShowWindow
WindowFromDC
Sections
.text Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE