?MNDkjiduIUDIUiuDIUdIOpDJKKDLKJDLIuyd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
24ad94d775765a82219ea558f022c35f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24ad94d775765a82219ea558f022c35f.exe
Resource
win10v2004-20231215-en
General
-
Target
24ad94d775765a82219ea558f022c35f
-
Size
245KB
-
MD5
24ad94d775765a82219ea558f022c35f
-
SHA1
b585977149d7c28d48db117b29ceeb63c22b0740
-
SHA256
427d927d21dcebbd9b772773caf52829d859cbb1aacd6b1998b2726663552c05
-
SHA512
b6d5c3f487be324c6a9b004de4e1e553d426125b5c23512f941156c125cfd8d43aaeaecd781d70173f7ac1a0d6b68c8de0b799cb2f1ec168c4cc249bd9cc3906
-
SSDEEP
6144:KTbq36rSx44z7w32dVy89PoulhCC5XDpalPnfgHCl:wbSus44A32dHuuXCeU9fdl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ad94d775765a82219ea558f022c35f
Files
-
24ad94d775765a82219ea558f022c35f.exe windows:5 windows x86 arch:x86
71909da02f65f0c75ea1691343ae2051
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorA
SendMessageTimeoutW
IsMenu
ModifyMenuW
DestroyCaret
ScreenToClient
CheckMenuItem
DispatchMessageW
WaitMessage
SetWindowRgn
GetClipCursor
FindWindowExW
CharLowerW
TranslateAcceleratorA
RedrawWindow
GetKeyState
GetWindowPlacement
PostMessageA
InvalidateRect
DeleteMenu
GetWindowDC
GetScrollRange
UnloadKeyboardLayout
SetRectEmpty
ShowScrollBar
GetClassInfoA
GetSystemMetrics
OemToCharA
DrawEdge
GetUserObjectInformationA
InsertMenuItemW
SetWindowTextA
GetClassInfoExW
ArrangeIconicWindows
DefDlgProcA
RegisterClassExA
kernel32
MapViewOfFile
GetFileAttributesExW
CallNamedPipeW
lstrcpynA
CancelWaitableTimer
GetFileTime
GetWindowsDirectoryA
HeapFree
FlushViewOfFile
GetThreadTimes
lstrcatW
FreeLibrary
HeapCreate
SearchPathW
GetShortPathNameW
TlsFree
GetCurrentDirectoryW
VirtualQuery
gdi32
CombineRgn
SetLayout
CreateDCW
SelectClipRgn
StartPage
TextOutW
GetTextAlign
GetObjectA
GetBrushOrgEx
SetViewportOrgEx
CreateICW
GetMapMode
EndDoc
FillRgn
CreatePenIndirect
ScaleWindowExtEx
CreateBrushIndirect
Ellipse
Exports
Exports
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 56KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ