Static task
static1
Behavioral task
behavioral1
Sample
1860fd34f684e4cfecf54fd5b2015e6f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1860fd34f684e4cfecf54fd5b2015e6f.exe
Resource
win10v2004-20231215-en
General
-
Target
1860fd34f684e4cfecf54fd5b2015e6f
-
Size
94KB
-
MD5
1860fd34f684e4cfecf54fd5b2015e6f
-
SHA1
635968a6d4d7bdbb4c236ff2a9b9a0542f680452
-
SHA256
75ea29e1bba0eb3602d0616c5a1f3778f5376aeab8dd5e35ad4f885fafb297d8
-
SHA512
8fed72d4b77f5149f05677f99e7a8f5bcde69786468050da07a245421c9b9c71f42fa4a0365f8649f584d6f3e9d58facd808ce53fb3628656df3e73f7822bcba
-
SSDEEP
1536:vKg4KW5O9o8wjhS5UESsqmjFj/1JgiRr/UzGhrRyQQw421zrn18gPhmPptoW:vKl89lwjrsdjFhJg0dhrdQw42BnSg8PL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1860fd34f684e4cfecf54fd5b2015e6f
Files
-
1860fd34f684e4cfecf54fd5b2015e6f.exe windows:4 windows x86 arch:x86
671e8c12286ec0666c2b4283a861daeb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongA
DrawEdge
EnumWindows
GetMessagePos
SystemParametersInfoA
BeginDeferWindowPos
IsWindowVisible
CharLowerA
DispatchMessageW
IsChild
GetClipboardData
GetCursor
GetDesktopWindow
EnableScrollBar
ClientToScreen
FindWindowA
GetCursorPos
CreatePopupMenu
IsWindowEnabled
CallWindowProcA
EqualRect
IsDialogMessageA
GetMenuItemInfoA
GetDlgItem
EndPaint
GetKeyState
MessageBoxA
shell32
Shell_NotifyIconA
SHGetFolderPathA
SHGetFileInfoA
DragQueryFileA
SHGetDesktopFolder
kernel32
CreateThread
GetUserDefaultLCID
VirtualAlloc
GetCurrentProcessId
VirtualAllocEx
ExitThread
SetEndOfFile
lstrcpyA
GetVersionExA
HeapAlloc
FindResourceA
GetFileSize
SetErrorMode
CreateFileA
WideCharToMultiByte
VirtualQuery
ExitProcess
SetThreadLocale
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
GetFileAttributesA
oleaut32
SafeArrayCreate
OleLoadPicture
SafeArrayPtrOfIndex
SysReAllocStringLen
VariantChangeType
RegisterTypeLib
SafeArrayUnaccessData
SysStringLen
SafeArrayGetElement
SafeArrayGetUBound
ole32
CoGetObjectContext
CoCreateInstanceEx
CoGetMalloc
comdlg32
FindTextA
GetFileTitleA
GetSaveFileNameA
gdi32
CreateFontIndirectA
GetObjectA
GetPixel
GetRgnBox
CopyEnhMetaFileA
CreatePalette
BitBlt
SetBkMode
msvcrt
malloc
swprintf
wcschr
sqrt
rand
memcpy
log10
wcsncmp
log
memset
exp
sprintf
strlen
srand
memcmp
wcstol
Sections
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 1024B - Virtual size: 661B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ