Static task
static1
Behavioral task
behavioral1
Sample
21862257ac7638f6eebfd4bdfba1ae90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21862257ac7638f6eebfd4bdfba1ae90.exe
Resource
win10v2004-20231215-en
General
-
Target
21862257ac7638f6eebfd4bdfba1ae90
-
Size
207KB
-
MD5
21862257ac7638f6eebfd4bdfba1ae90
-
SHA1
49d709caf1cb7729865de4648feaa97176f4d437
-
SHA256
16cddf833df862c0d5edfc15a6b396c8f4a7e041283d9ea70526d2f833710136
-
SHA512
57f140893df16057b2d09765a3e8c8f25a72cb1ec7f0bbcf4f20b240edacd6adecb4f09bc5f7f207b80fd4f33fbee0a613dcb04d9054d920e636f76afaf6647e
-
SSDEEP
3072:U/f0UXtOiYsgLN68EhUxwBDgFuojasD+CZvmuneTTlO+wN0HTQTeF8eev+Sl:U0ckiYR6pUC6FHRDnQO+q0ks8Dx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21862257ac7638f6eebfd4bdfba1ae90
Files
-
21862257ac7638f6eebfd4bdfba1ae90.exe windows:4 windows x86 arch:x86
3c27d58f472dc6cb7ce9cd81f1900bf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
ExitThread
GetLastError
LoadLibraryA
IsBadReadPtr
ExitProcess
LoadLibraryExA
VirtualAlloc
GetACP
VirtualAllocEx
GetCommandLineW
GetModuleHandleA
shell32
SHGetDiskFreeSpaceA
SHFileOperationA
SHGetFolderPathA
SHGetFileInfoA
Shell_NotifyIconA
advapi32
RegCreateKeyExA
user32
GetWindowTextA
SetScrollInfo
SetWindowPlacement
GetScrollRange
SendMessageW
GetClassLongA
OffsetRect
IsRectEmpty
GetWindowThreadProcessId
EndPaint
RegisterClassA
CharToOemA
ReleaseCapture
PtInRect
GetClipboardData
MsgWaitForMultipleObjects
UnhookWindowsHookEx
SystemParametersInfoA
ScreenToClient
IntersectRect
GetWindowPlacement
EqualRect
ChildWindowFromPoint
GetMessagePos
MessageBoxA
EnableWindow
wsprintfA
EnableScrollBar
RegisterWindowMessageA
EnableMenuItem
SendMessageA
RemovePropA
SetClassLongA
GetDCEx
ShowOwnedPopups
OpenClipboard
DispatchMessageA
SetWindowPos
GetWindowLongA
SetPropA
AdjustWindowRectEx
WaitMessage
GetMenuState
SetForegroundWindow
DrawTextA
IsZoomed
GetForegroundWindow
PostMessageA
SetActiveWindow
GetMenuItemInfoA
SetRect
GetCursorPos
CreateIcon
PeekMessageA
CharLowerBuffA
InvalidateRect
DestroyIcon
FrameRect
RemoveMenu
SetScrollPos
EnumWindows
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetDlgItem
DefMDIChildProcA
RedrawWindow
UpdateWindow
LoadBitmapA
CheckMenuItem
GetScrollInfo
SetScrollRange
ole32
StgOpenStorage
CreateBindCtx
shlwapi
SHDeleteValueA
SHGetValueA
PathIsDirectoryA
PathGetCharTypeA
PathIsContentTypeA
SHStrDupA
PathFileExistsA
SHDeleteKeyA
SHQueryValueExA
SHQueryInfoKeyA
gdi32
GetPixel
GetObjectA
CreateBrushIndirect
SelectPalette
GetDCOrgEx
GetDIBColorTable
CreatePalette
GetDIBits
oleaut32
VariantChangeType
SafeArrayGetUBound
SysAllocStringLen
comctl32
ImageList_GetBkColor
ImageList_Read
ImageList_DrawEx
ImageList_Add
ImageList_Create
ImageList_Destroy
Sections
CODE Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ