?MNDkjiduIUDIUiuDIUdIOpDJKKDLKJDLIuyd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
44a06c9aca6d0f19e2f2eb11629fd9bb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44a06c9aca6d0f19e2f2eb11629fd9bb.exe
Resource
win10v2004-20231215-en
General
-
Target
44a06c9aca6d0f19e2f2eb11629fd9bb
-
Size
227KB
-
MD5
44a06c9aca6d0f19e2f2eb11629fd9bb
-
SHA1
11db06b8ab473ae46dfa66544986254be6a38404
-
SHA256
7f8f7181548de2e7ff9c7846693555b25f4bb3c2958522c4eee00742b287b332
-
SHA512
d246feb92eea4826c73fa77eebd72e02b0229546fc8dc5a26e0a31e882f995191b4676d0cd2ef6058c2329eecb2da0c88ce2062c94a56b553bafd7d126062143
-
SSDEEP
3072:AU8xrk/S2Atu1VhHi9euYTCXOXm5HJzFvdRquGS5tzpYoD9kmFO8LQDSIhfZjBw6:E1kldyeJWXO2HzlRqD0zX1I8Lqhc9vVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44a06c9aca6d0f19e2f2eb11629fd9bb
Files
-
44a06c9aca6d0f19e2f2eb11629fd9bb.exe windows:5 windows x86 arch:x86
f180fc6ecbf7bb46df97de4ce9328290
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextW
GetSaveFileNameA
CommDlgExtendedError
PrintDlgW
gdi32
BeginPath
GetNearestPaletteIndex
GetBoundsRect
ResizePalette
CombineRgn
CreateDIBitmap
CreateCompatibleDC
SetDIBits
EnumFontFamiliesExW
RectVisible
GetRgnBox
GetTextExtentPointA
RealizePalette
CreateBitmap
SetViewportExtEx
TextOutA
SetWindowOrgEx
LineDDA
user32
GetSystemMenu
ModifyMenuA
DialogBoxParamW
GetMenuItemCount
CreateWindowExA
HiliteMenuItem
DrawTextW
DeleteMenu
LoadMenuW
EnumThreadWindows
GetClassInfoA
InsertMenuItemW
IntersectRect
DrawEdge
SendMessageTimeoutA
GetWindowDC
ClientToScreen
MessageBoxA
GetMenuItemInfoW
UnionRect
SetDlgItemTextA
AdjustWindowRect
RegisterWindowMessageA
IsDialogMessageW
InSendMessageEx
DrawAnimatedRects
SetWindowPlacement
GetMenuItemID
PostMessageA
CreateAcceleratorTableW
ActivateKeyboardLayout
GetClassLongW
ShowOwnedPopups
GetUpdateRect
ScrollWindowEx
CharLowerBuffW
kernel32
SetThreadContext
IsBadCodePtr
SearchPathA
AddAtomA
GlobalFree
GetSystemDirectoryA
EnumResourceNamesW
WaitForMultipleObjectsEx
CreateSemaphoreW
GetTimeZoneInformation
GetThreadContext
lstrcatA
lstrcmpA
GetLastError
VirtualFree
SetWaitableTimer
CreateWaitableTimerA
Exports
Exports
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 92KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ