Static task
static1
Behavioral task
behavioral1
Sample
42333ae8621dacd5b31af52cf6c1b2a3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42333ae8621dacd5b31af52cf6c1b2a3.exe
Resource
win10v2004-20231215-en
General
-
Target
42333ae8621dacd5b31af52cf6c1b2a3
-
Size
187KB
-
MD5
42333ae8621dacd5b31af52cf6c1b2a3
-
SHA1
230de441c9304f85fa44bbf5a8b7c8fec56b8b17
-
SHA256
786b5006b1a45115d4ca52fd7e13fdaacbe5053b46498ea8b2d498c4559fd2bb
-
SHA512
02241b9d2a87ab0c195f528bece1c0c2d8c9006e31362ed8fe1c544afd5c2dd54d8815105a546ab4f5547b948add9828dbddbf0b9e1b5489418e569270c48ab1
-
SSDEEP
3072:TyjPsKb8B0a10rAlTD1e2qDNffS2EsME5hJfKImW8JobwkMjlsPeET/v17fN76z5:+jPslGRWD1eVDN3S2EsMmhUImROWJs/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42333ae8621dacd5b31af52cf6c1b2a3
Files
-
42333ae8621dacd5b31af52cf6c1b2a3.exe windows:28389 windows x86 arch:x86
f632d6f308ca647f9a8e7a290f04e3f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragAcceptFiles
gdi32
GetStockObject
LineTo
PatBlt
CreateCompatibleBitmap
CreateCompatibleBitmap
GetObjectW
DeleteDC
ExtTextOutW
SetTextColor
GetTextMetricsW
CreateCompatibleDC
DeleteObject
TextOutW
GetTextMetricsW
SetTextColor
CreateCompatibleBitmap
MoveToEx
advapi32
RegSetValueExA
GetLengthSid
OpenProcessToken
kernel32
GetTickCount
SetEvent
GetModuleHandleW
GetCommandLineA
MultiByteToWideChar
WaitForSingleObject
VirtualAlloc
FreeLibrary
GetModuleHandleA
GetModuleHandleA
lstrlenW
SetUnhandledExceptionFilter
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
user32
GetMessageW
GetSystemMetrics
PostMessageW
LoadStringW
PostMessageW
UpdateLayeredWindow
GetDlgItem
GetDlgItem
GetWindowRect
GetDC
PostMessageW
GetDC
ShowWindow
SendMessageW
SendMessageW
GetDC
CreateWindowExW
GetMessageW
PostMessageW
DestroyWindow
DefWindowProcW
DestroyWindow
GetWindowRect
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ