Static task
static1
Behavioral task
behavioral1
Sample
1caaa84d0d8a2bafd1ea15ce069f295f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1caaa84d0d8a2bafd1ea15ce069f295f.exe
Resource
win10v2004-20231215-en
General
-
Target
1caaa84d0d8a2bafd1ea15ce069f295f
-
Size
149KB
-
MD5
1caaa84d0d8a2bafd1ea15ce069f295f
-
SHA1
c285e2eec90c685b6443ae098e5fa74b376f7b1b
-
SHA256
8eb2246861cf28c72380de72280bed3da569841307773d62b6fde2def398f527
-
SHA512
09ecf60ea605809d8efc5cb93582b197fe1d54f777d7fe2c533e742c42dc852edaef9c6cd260763215b096976e7ab92eef452e565459450b5387fa488f05f042
-
SSDEEP
3072:a3TWH4N5aDmA/0CAuUFuBnd8GVU/VESJQIJnecRYRy8IgQmTX:mTi08DmA/NAuUQZd8GVgecSw0QmT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1caaa84d0d8a2bafd1ea15ce069f295f
Files
-
1caaa84d0d8a2bafd1ea15ce069f295f.exe windows:5 windows x86 arch:x86
bbdd019aa7aefec9a89cce168f9283e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GlobalFree
GetFileType
CreateDirectoryA
DeleteFileA
ExitThread
GetCPInfo
OpenFileMappingA
GetPriorityClass
FindAtomA
GetStdHandle
CopyFileA
ReadFile
FreeResource
CopyFileExW
AddAtomW
FindAtomW
ExitProcess
WriteFile
DeleteFileA
AddAtomW
GetFileTime
GetFileType
GetCPInfo
FreeResource
FindAtomW
FatalExit
GlobalFree
GetLocalTime
CreateDirectoryA
FindAtomA
AddAtomA
CopyFileA
OpenFile
CopyFileExA
ExitThread
CopyFileExW
GetCommandLineA
GetPriorityClass
ReadFile
DeleteAtom
FlushFileBuffers
ExitProcess
GetLastError
OpenFileMappingA
FreeResource
OpenFile
GetFileType
FlushFileBuffers
FindClose
ExitProcess
OpenFileMappingA
DeleteFileW
CreateDirectoryA
GetLastError
CopyFileExW
FindAtomA
GetCommandLineA
GetFileTime
AddAtomA
AddAtomW
GetStdHandle
FlushFileBuffers
GetLocalTime
DeleteAtom
GlobalFree
OpenFile
GetCPInfo
FindClose
CopyFileA
GetFileTime
FindAtomA
ReadFile
CreateDirectoryA
CopyFileExW
ExitThread
FatalExit
AddAtomA
FindAtomW
OpenFileMappingA
GetFileType
GetCPInfo
OpenFileMappingA
CreateDirectoryA
CopyFileExW
GetStdHandle
DeleteFileW
FindAtomW
ReadFile
WriteFile
AddAtomA
CopyFileExA
OpenFile
CreateDirectoryA
GetCPInfo
CopyFileExA
GetFileType
GetLastError
GetFileTime
DeleteAtom
FindAtomW
AddAtomW
GetStdHandle
ExitProcess
WriteFile
FindClose
ExitThread
CopyFileExW
GetLocalTime
FindAtomW
AddAtomA
FindClose
GetLastError
FindAtomA
WriteFile
CreateDirectoryA
FatalExit
GetCPInfo
GetFileTime
CopyFileExW
ReadFile
ExitThread
FreeResource
WriteFile
FlushFileBuffers
DeleteFileA
GlobalFree
CopyFileExW
GetPriorityClass
CopyFileA
FindClose
ExitThread
GetCPInfo
AddAtomA
DeleteFileW
FindAtomA
ExitProcess
DeleteAtom
GetFileType
AddAtomW
CopyFileA
FindAtomA
DeleteFileA
ReadFile
DeleteFileW
GetPriorityClass
CopyFileExW
GetLocalTime
user32
AppendMenuW
CalcMenuBar
DrawTextA
CopyRect
GetDlgItem
CloseWindow
EndDialog
DialogBoxParamW
DrawTextW
AppendMenuA
GetWindowTextLengthA
IsWindow
CreateIcon
DrawIcon
IsMenu
GetFocus
IsWindow
GetMenu
CopyRect
GetDC
AppendMenuW
EndDialog
IsMenu
GetDlgItem
LoadMenuA
CloseWindow
CreateIcon
DialogBoxParamA
GetWindowTextLengthA
advapi32
RegEnumKeyW
RegQueryValueW
RegOpenKeyW
RegEnumKeyA
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
RegReplaceKeyW
RegCreateKeyExA
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegGetKeySecurity
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueW
RegEnumKeyW
RegQueryValueExA
RegReplaceKeyA
RegDeleteKeyW
RegCreateKeyW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegOpenKeyA
Sections
.gd06 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.f4h3 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.68a3 Size: 99KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eg7e Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.afhad Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE