Static task
static1
Behavioral task
behavioral1
Sample
1be1b00a9c9d3add9b76cca70d917d9c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1be1b00a9c9d3add9b76cca70d917d9c.exe
Resource
win10v2004-20231215-en
General
-
Target
1be1b00a9c9d3add9b76cca70d917d9c
-
Size
143KB
-
MD5
1be1b00a9c9d3add9b76cca70d917d9c
-
SHA1
87f82f68a21faf942b4ad50db74f042c8ac89df4
-
SHA256
8424fa30c394ba663b5074a52a61531f99f3b0afd3dfd10adad02285ec9cccb2
-
SHA512
23f5156007bc8a1bded88390eabbe856bd319037416334f12ef322efea4522daac271f5fa0afca806c1f682282b80b69220c11baa42cb8bd18a6c8c6c9289c7c
-
SSDEEP
3072:ZvgSs9pcmlGSYZnkEt3IkzzsngTGfd4X/i5J4l8y:2D9RltKkEt34vALl8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be1b00a9c9d3add9b76cca70d917d9c
Files
-
1be1b00a9c9d3add9b76cca70d917d9c.exe windows:4 windows x86 arch:x86
2c26c973aa87788897d61eb85d7fa731
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIconEx
IsMenu
DrawTextA
GetDC
GetFocus
GetCursor
CopyImage
GetDlgItem
DrawTextW
GetMenu
AlignRects
CreateIcon
AppendMenuW
GetWindowTextLengthA
DialogBoxParamW
InsertMenuA
LoadMenuA
GetWindowTextA
IsWindow
BlockInput
EndDialog
GetFocus
GetDC
CopyImage
AppendMenuW
DialogBoxParamA
CopyIcon
GetMenu
AlignRects
DrawIconEx
CreateIcon
InsertMenuA
DrawIcon
advapi32
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteValueW
RegReplaceKeyW
RegQueryValueExW
RegEnumValueW
RegLoadKeyW
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyW
RegQueryValueA
RegQueryValueW
RegGetKeySecurity
RegCreateKeyExA
RegLoadKeyA
RegOpenKeyA
RegCreateKeyW
RegReplaceKeyA
RegEnumValueA
kernel32
GetCommandLineA
GetCPInfo
GetCommandLineA
GlobalAlloc
GetCommandLineA
GetLastError
GetCommandLineA
lstrlenA
GetCommandLineA
GetDateFormatA
GetCommandLineA
GlobalFree
GetCommandLineA
GetModuleFileNameA
GetCommandLineA
lstrcpyA
GetCommandLineA
comctl32
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_BeginDrag
ImageList_DrawEx
ImageList_Copy
ImageList_Replace
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_Draw
ImageList_EndDrag
ImageList_Read
ImageList_LoadImageW
ImageList_GetIcon
ImageList_LoadImage
ImageList_DragMove
ImageList_DragLeave
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rda7a Size: 2KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ