Static task
static1
Behavioral task
behavioral1
Sample
2abfd2e01a3d712475638e875cb50f30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2abfd2e01a3d712475638e875cb50f30.exe
Resource
win10v2004-20231215-en
General
-
Target
2abfd2e01a3d712475638e875cb50f30
-
Size
65KB
-
MD5
2abfd2e01a3d712475638e875cb50f30
-
SHA1
f7aa8580aa0390238edaff86ee9cf04439abc1eb
-
SHA256
e28779718aa636d672ab3b16b9b840c41ba6ef5a3962c7fb16d872a00b11e3c2
-
SHA512
299b6a5e81545aec5836b3cbd7637837c6e12b8a9103be724e439e5b0d07036e1051c9457414d8c37695160de8817987a7b248264e5b125e8c8393f4ec020074
-
SSDEEP
1536:66eKgUwgCpKho3aPQGULaDAnQR5u+sBzLSzQ:6onwggKKaXQQ4QRc+gSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2abfd2e01a3d712475638e875cb50f30
Files
-
2abfd2e01a3d712475638e875cb50f30.exe windows:4 windows x86 arch:x86
69c69886a6082c60a01f0bcf612eaad4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
DeleteObject
CreateSolidBrush
SetTextAlign
SelectObject
GetPixel
SaveDC
GetDeviceCaps
SetMapMode
SetStretchBltMode
CreateFontIndirectA
PatBlt
GetClipBox
GetStockObject
SelectPalette
CreatePen
SetTextColor
CreatePalette
CreateCompatibleDC
DeleteDC
LineTo
GetTextMetricsA
RectVisible
GetObjectA
kernel32
GetProcessHeap
GetWindowsDirectoryA
GetCommandLineA
GetThreadLocale
GetTickCount
GetVersion
GlobalFindAtomW
GetCurrentProcess
GetCurrentThreadId
IsDebuggerPresent
SetCurrentDirectoryA
GetModuleHandleA
GetUserDefaultLangID
GetOEMCP
RemoveDirectoryA
lstrlenA
lstrcmpiA
lstrcmpA
DeleteFileA
GetConsoleOutputCP
GetCommandLineW
GetDriveTypeA
lstrcmpiW
CopyFileA
DeleteFileW
QueryPerformanceCounter
GetCurrentThread
lstrlenW
GetCurrentProcessId
MulDiv
VirtualAlloc
GlobalFindAtomA
VirtualFree
GetACP
GetModuleHandleW
GetStartupInfoA
user32
GetParent
GetSystemMetrics
GetDC
GetDesktopWindow
CharNextA
TranslateMessage
glu32
gluNurbsCallback
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Jeprtg D Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uhflatlr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ