Static task
static1
Behavioral task
behavioral1
Sample
2e940fca41aff365616a1d921d066dd7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2e940fca41aff365616a1d921d066dd7.exe
Resource
win10v2004-20231222-en
General
-
Target
2e940fca41aff365616a1d921d066dd7
-
Size
151KB
-
MD5
2e940fca41aff365616a1d921d066dd7
-
SHA1
b6b45e5c469501cffa953cb88035f0c60a944bb6
-
SHA256
264490baef1bfd3be715c197ab3bba9af782c22363de4d809dfa7cfff52d9710
-
SHA512
42b2b6427a0604cfc555c5d209ac98f5451784cc22dad790af1d2d92f3219ffd7fe4c3946c7157b1c14eddd1e6a6e1ca53f0308ca225678901a006b7d0454806
-
SSDEEP
3072:EPISPCFat/BFKafpzdr8b3dkYJIw9BtYIGHyGSfQItjXZxb5:+LS2JFKAp18b3dkYHh+SfRjX/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e940fca41aff365616a1d921d066dd7
Files
-
2e940fca41aff365616a1d921d066dd7.exe windows:4 windows x86 arch:x86
818f1bd537e1cec3e86deca17ebce827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuA
DialogBoxParamW
GetDlgItem
DrawTextW
DrawIconEx
DrawIcon
GetCursor
LoadCursorA
AppendMenuW
BlockInput
IsMenu
LoadMenuA
CopyImage
CopyIcon
CloseWindow
GetWindowTextA
DialogBoxParamW
DialogBoxParamA
CopyIcon
AppendMenuA
EndDialog
AlignRects
GetCursor
AppendMenuW
GetWindowTextLengthA
LoadMenuA
DrawIconEx
DrawTextA
LoadCursorA
DrawIcon
BlockInput
CreateIcon
CopyImage
GetDlgItem
CalcMenuBar
CopyRect
CloseWindow
GetCursor
LoadMenuA
CopyImage
DrawIcon
DialogBoxParamW
AppendMenuW
DrawTextA
CopyIcon
BlockInput
InsertMenuA
DialogBoxParamA
LoadCursorA
IsWindow
DrawIconEx
AlignRects
AppendMenuA
EndDialog
DrawTextW
kernel32
GetStdHandle
ReadConsoleA
DeleteFileW
GlobalFree
GetComputerNameA
OpenFile
DeleteFileA
GetCPInfo
CreateDirectoryA
FindFirstFileA
CreateThread
FindAtomA
GetCommandLineA
OpenFileMappingA
CopyFileExA
SetLastError
CopyFileA
DeleteAtom
Sleep
GetConsoleMode
CopyFileW
DeleteFileA
WriteFile
FindFirstFileA
SetLastError
GetComputerNameA
OpenFileMappingA
ExitThread
GetFileSize
CopyFileExW
CopyFileExA
GetFileTime
CreateProcessA
GetConsoleMode
FindAtomA
OpenFile
CreateDirectoryA
CopyFileA
GetCommandLineA
ReadFile
GlobalFree
GetLastError
ReadConsoleA
GetComputerNameA
CopyFileExA
ReadConsoleA
OpenFileMappingA
GetFileSize
GetLastError
ExitThread
SetLastError
GetCommandLineA
CopyFileExW
Sleep
CreateDirectoryA
DeleteFileA
DeleteFileW
GetStdHandle
DeleteAtom
GetFileTime
GlobalFree
advapi32
RegEnumValueA
RegGetKeySecurity
RegOpenKeyExA
RegQueryValueW
RegDeleteValueA
RegEnumKeyA
RegLoadKeyW
RegOpenKeyA
RegReplaceKeyW
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyW
RegQueryValueExA
RegOpenKeyExW
RegLoadKeyA
RegQueryInfoKeyA
gdi32
CloseMetaFile
CloseFigure
SetTextColor
AbortPath
GetBitmapBits
ClearBitmapAttributes
BitBlt
AddFontMemResourceEx
GetBrushOrgEx
RestoreDC
GetPixel
GetCurrentPositionEx
AddFontResourceExW
AddFontResourceW
AddFontResourceA
ClearBrushAttributes
AddFontResourceExA
ExcludeClipRect
GetCurrentPositionEx
AddFontResourceW
ClearBitmapAttributes
CreateSolidBrush
CancelDC
AddFontResourceA
DeleteObject
ExtTextOutA
BitBlt
AbortPath
AddFontMemResourceEx
CopyMetaFileA
DeleteDC
GetPixel
comctl32
ImageList_Create
ImageList_GetImageCount
InitCommonControls
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetImageRect
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_Read
ImageList_DragMove
ImageList_Merge
ImageList_GetDragImage
ImageList_Draw
ImageList_AddMasked
ImageList_Remove
ImageList_LoadImage
ImageList_LoadImageW
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Destroy
ImageList_Replace
ImageList_GetIcon
ImageList_Copy
ImageList_EndDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_Read
ImageList_GetIconSize
ImageList_Copy
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_GetImageRect
ImageList_DragEnter
ImageList_LoadImageA
ImageList_Replace
InitCommonControls
ImageList_DragLeave
ImageList_AddIcon
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Remove
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_Draw
ImageList_LoadImage
ImageList_GetIcon
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ