Static task
static1
Behavioral task
behavioral1
Sample
269b8ea849f92dfc9e5ab52f7fbee29d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
269b8ea849f92dfc9e5ab52f7fbee29d.exe
Resource
win10v2004-20231222-en
General
-
Target
269b8ea849f92dfc9e5ab52f7fbee29d
-
Size
123KB
-
MD5
269b8ea849f92dfc9e5ab52f7fbee29d
-
SHA1
8c830c4375b044d5d866df19c68bb5afb66c20a5
-
SHA256
8f72d8fabbd43cd32d7afa3d48beece49bf992bc015c150fa764b90c137f660e
-
SHA512
26197cc699c5d658f6af16b0f19928abfa089a1cd1df3d7adb803ce4c828f18ac5fa2ff796fc6cdda170b2c285c9fe228b8178f4c6a16b2d9121b8215b91c22f
-
SSDEEP
1536:cH7gCVoGc4+ib1ug+3xR0MWoRdjTylTQ5t+sNJ1+5QFtYzNPRd1eTHnEwyKqqG:cUJc1sgGDTKT8tlFjaZd1eTHEwyKqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 269b8ea849f92dfc9e5ab52f7fbee29d
Files
-
269b8ea849f92dfc9e5ab52f7fbee29d.exe windows:4 windows x86 arch:x86
d92b7129ea815c4a02f562acf937dfde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawMenuBar
MessageBoxA
DrawIcon
ShowScrollBar
EnableScrollBar
DrawEdge
GetMenuState
GetDesktopWindow
GetClassInfoA
GetDCEx
DrawIconEx
GetWindow
IsChild
SetWindowTextA
GetPropA
BeginPaint
CharToOemA
CreateWindowExA
EnableWindow
GetMenuItemCount
EnumWindows
EndDeferWindowPos
IsWindowVisible
CheckMenuItem
GetSysColor
GetMenu
IsDialogMessageA
GetMessagePos
GetScrollInfo
EnableMenuItem
GetMenuItemInfoA
SetCursor
FrameRect
GetMenuItemID
DeferWindowPos
CallWindowProcA
DefWindowProcA
DefFrameProcA
DispatchMessageA
GetCapture
GetFocus
GetMenuStringA
DrawTextA
GetClassLongA
EnumChildWindows
CreateMenu
GetKeyNameTextA
CharLowerBuffA
CreatePopupMenu
GetLastActivePopup
GetIconInfo
FindWindowA
TrackPopupMenu
GetScrollPos
GetActiveWindow
EqualRect
GetKeyState
SetWindowLongA
CharNextA
GetParent
GetScrollRange
DefMDIChildProcA
GetCursorPos
GetWindowTextA
GetSysColorBrush
GetClipboardData
GetCursor
msvcrt
malloc
memmove
log10
tan
_acmdln
comctl32
ImageList_Write
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Add
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
kernel32
GetCurrentThreadId
GetStdHandle
ExitThread
DeleteFileA
SizeofResource
FreeResource
GetVersionExA
GetStartupInfoA
SetHandleCount
LoadLibraryExA
GetFullPathNameA
WaitForSingleObject
ExitProcess
GetCPInfo
SetLastError
GetProcessHeap
lstrcatA
lstrlenA
MoveFileA
SetErrorMode
CreateFileA
GetFileType
GetDateFormatA
InitializeCriticalSection
GetACP
LoadResource
FindFirstFileA
GetThreadLocale
FreeLibrary
lstrcpynA
VirtualFree
WideCharToMultiByte
LocalReAlloc
HeapFree
LockResource
VirtualAllocEx
CreateEventA
FindResourceA
GetLocalTime
GetFileAttributesA
Sleep
lstrcpyA
RaiseException
MoveFileExA
GetLastError
LocalFree
GetProcAddress
FormatMessageA
GetTickCount
GetDiskFreeSpaceA
GetOEMCP
ReadFile
VirtualAlloc
CloseHandle
EnumCalendarInfoA
GetCurrentThread
lstrcmpA
GlobalAlloc
GetCommandLineA
GetCurrentProcess
GetSystemDefaultLangID
CreateThread
GetModuleFileNameA
GlobalAddAtomA
HeapAlloc
GetCurrentProcessId
EnterCriticalSection
GlobalFindAtomA
GetModuleHandleA
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ