?_MessageBoxExW@@YGPAXKGG@Z
Static task
static1
Behavioral task
behavioral1
Sample
401525afa14227f48dcf4c9554afb73b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
401525afa14227f48dcf4c9554afb73b.exe
Resource
win10v2004-20231215-en
General
-
Target
401525afa14227f48dcf4c9554afb73b
-
Size
147KB
-
MD5
401525afa14227f48dcf4c9554afb73b
-
SHA1
f75ccb43ba0499a9bfff891e31b18162c6a0a341
-
SHA256
dba050cf7610e8b6361d02636e8f48b315edf272acf0a8bd38539e2da0bf9b7e
-
SHA512
25636c8d1a041ba359ca0706c335f14ac982a3d5b2cc8da2cdd1bb04507bd6bf61a301e880ff0c39831be9e82b92161ef9850bbc07aef2862f0322da66fbd6fe
-
SSDEEP
3072:JN8XoFhahcg40L7wrNyPIbh+djvDernRNDFZLD6DnfwU:T+oFhahcZyI5rvR5Dsw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 401525afa14227f48dcf4c9554afb73b
Files
-
401525afa14227f48dcf4c9554afb73b.exe windows:5 windows x86 arch:x86
4c3dc850221700474cc4a5c8a3cc9e9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrNCatA
PathAppendW
StrCmpIW
ord156
ChrCmpIW
PathFindExtensionA
shell32
ord147
kernel32
FindFirstFileExA
FileTimeToDosDateTime
GetFileSize
SetWaitableTimer
SetCommBreak
ClearCommBreak
GetCommConfig
GetSystemPowerStatus
BeginUpdateResourceA
lstrcmpiW
GetFileTime
GetVersion
OpenSemaphoreA
LoadLibraryExW
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
SetCommTimeouts
user32
DrawFocusRect
GetDC
LoadMenuIndirectW
LoadIconA
ChangeMenuW
HideCaret
EnumDisplayDevicesW
SendNotifyMessageW
EnumPropsW
UnloadKeyboardLayout
GetKeyboardLayout
SendMessageTimeoutW
DefMDIChildProcW
SetWindowsHookW
DrawMenuBar
WindowFromDC
EnableScrollBar
SetCaretBlinkTime
MessageBoxIndirectW
MapWindowPoints
AdjustWindowRect
GetDlgCtrlID
SetDlgItemTextA
DefWindowProcW
CheckMenuItem
GetWindow
ScrollWindowEx
gdi32
LPtoDP
GetEnhMetaFileDescriptionW
SetSystemPaletteUse
GetKerningPairsW
GetRegionData
SaveDC
GetFontLanguageInfo
GetMetaFileW
GetCharABCWidthsFloatW
CreateEllipticRgn
FillPath
CopyMetaFileW
UpdateColors
advapi32
AddAccessAllowedObjectAce
AddAce
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i_text Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ex_dat Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem_0 Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mconst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_s Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ