?_DestroyCaret@@YGPAXKEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
2b5860c33797ed1dc07a91fda635a342.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b5860c33797ed1dc07a91fda635a342.exe
Resource
win10v2004-20231215-en
General
-
Target
2b5860c33797ed1dc07a91fda635a342
-
Size
146KB
-
MD5
2b5860c33797ed1dc07a91fda635a342
-
SHA1
3090102a3164b25695e57307ef85dc47c4539f81
-
SHA256
e1ed3e6aa6258354536fd55eb22cc73945309b806471acdfe3d4b8bbbad50cb6
-
SHA512
dab6baaedc5eb268181a2f603b13e8467097ad41e7051ff57cc0d0412d94da0360a6dd2e2c3f0f17c792f028bf50651b86e92711456e23351daa1bbd4a7eb3b1
-
SSDEEP
3072:kKz+CuxrjbcTMTBEtotg8KPj76geavWrsRZixJ5Mx6XswLogOKKRnRI:HSxrPipz2auOYv5VswL3BKR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b5860c33797ed1dc07a91fda635a342
Files
-
2b5860c33797ed1dc07a91fda635a342.exe windows:5 windows x86 arch:x86
cdee2c2b07ebb0d8e63b3c72d0e7ed6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrIA
StrCpyW
StrCmpNIW
PathCanonicalizeW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetCommConfig
CopyFileW
CreateFileMappingW
FileTimeToDosDateTime
GetCommProperties
ClearCommBreak
OpenEventW
AssignProcessToJobObject
GetLogicalDriveStringsA
GetTapeStatus
GetDiskFreeSpaceW
GlobalHandle
WaitCommEvent
lstrcatW
GetModuleFileNameA
OpenWaitableTimerA
CreateMailslotW
CancelDeviceWakeupRequest
user32
CheckMenuRadioItem
SetPropA
GetWindowTextA
OpenInputDesktop
GetMenuStringW
ReplyMessage
ChangeMenuW
EnumDisplayMonitors
CallMsgFilterW
GetWindowContextHelpId
SendDlgItemMessageW
CreateIconFromResource
SendMessageCallbackW
GetCaretPos
ShowScrollBar
DestroyMenu
EnumDisplayDevicesA
GetKeyboardLayoutList
RegisterClassA
LoadCursorA
GetPropW
gdi32
PolyDraw
SelectObject
GetWinMetaFileBits
DeleteEnhMetaFile
UpdateColors
GetCurrentPositionEx
GetTextExtentPointW
CreatePalette
GdiFlush
CreateDIBPatternBrush
GetPixelFormat
PolyBezierTo
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ