Static task
static1
Behavioral task
behavioral1
Sample
299b354e56fd99363393130784aa93b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
299b354e56fd99363393130784aa93b4.exe
Resource
win10v2004-20231222-en
General
-
Target
299b354e56fd99363393130784aa93b4
-
Size
65KB
-
MD5
299b354e56fd99363393130784aa93b4
-
SHA1
5e233784fc4f943a8058f458dab194b8672174d7
-
SHA256
38bf905b3ea65a869ebb03eda68b4b322cbbd1978d2c16e94806b068d549b89a
-
SHA512
538629a7f668307d5943a0bd333217b52df14a947a2e55ce3908bcef61dbb84d2d2a95023cf11be180407d5d11a9bc721f7748ac15bc737a0c4005c2590b829e
-
SSDEEP
1536:qjfGC8VgcKsAnuW6geKuwPmz5555555555555AZ6LrJyNchXDvU:ufSKcKsAnuWxqwmz5555555555555AYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299b354e56fd99363393130784aa93b4
Files
-
299b354e56fd99363393130784aa93b4.exe windows:4 windows x86 arch:x86
1ca15d1722516b012ae7b5c2ed97e70e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
TlsGetValue
CloseHandle
SetLastError
HeapCreate
ReleaseMutex
GetModuleHandleA
LoadLibraryExA
GetProcessHeap
CreateFileA
GetExitCodeProcess
lstrlenW
TlsAlloc
FindResourceA
GetCurrentThreadId
CreateMutexA
DeleteAtom
GetStdHandle
GetEnvironmentVariableA
user32
DispatchMessageA
DrawEdge
CheckRadioButton
CreateWindowExA
GetDlgItem
GetDC
CreateMenu
FillRect
SetFocus
IsWindow
DrawMenuBar
GetCaretPos
CallWindowProcA
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPHashData
CPDecrypt
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrxkclw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE