Static task
static1
Behavioral task
behavioral1
Sample
02d085b9e0633268ea8d2d0f77c5c1cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02d085b9e0633268ea8d2d0f77c5c1cf.exe
Resource
win10v2004-20231215-en
General
-
Target
02d085b9e0633268ea8d2d0f77c5c1cf
-
Size
124KB
-
MD5
02d085b9e0633268ea8d2d0f77c5c1cf
-
SHA1
325d868ced3b8b87bf6dfdcc28c714b94ca1f72a
-
SHA256
cfe1df5ba889a8b275ae9d37488b314180be0f588442cdee0de6f65f380a7633
-
SHA512
6688a65c9b5e178cf5162268d7a443d0fefdf12b76ecd6e4e1c94105590ce7ae1f0655108cf8713720a6e290f20c3c6444f72b4865d21d1ec656c750d0ff0d5f
-
SSDEEP
1536:beSAngtgo3DhjtQ742g1qDEVmBXIVrKixG3rxNSr11roNChYkXw+KzQ3CNWcQ:beSA+H3s7+qA44l43FkvoNCh+ox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d085b9e0633268ea8d2d0f77c5c1cf
Files
-
02d085b9e0633268ea8d2d0f77c5c1cf.exe windows:4 windows x86 arch:x86
ce2571b385f9be51d6bbd46e4e926352
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
GetMenu
GetDC
LoadCursorA
DrawTextA
GetDlgItem
DrawIconEx
CopyRect
DrawTextW
CalcMenuBar
CloseWindow
LoadMenuA
CopyIcon
GetWindowTextA
GetWindowTextLengthA
EndDialog
comctl32
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Read
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Copy
ImageList_AddMasked
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_DragEnter
ImageList_LoadImage
ImageList_DragMove
ImageList_Replace
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_Merge
ImageList_AddIcon
kernel32
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetLocalTime
GetModuleHandleA
lstrcmpiA
GetStdHandle
GetStringTypeA
GetLastError
HeapFree
lstrcmpA
GetStringTypeW
GlobalFree
GetCommandLineA
SetLastError
Sleep
advapi32
RegFlushKey
RegCreateKeyExW
RegOpenKeyA
RegOpenKeyExW
RegEnumKeyW
RegEnumValueA
RegOpenKeyExA
RegCreateKeyW
RegEnumKeyExA
RegDeleteKeyA
RegLoadKeyW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumKeyA
RegEnumKeyExW
RegReplaceKeyW
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1009B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ