Static task
static1
Behavioral task
behavioral1
Sample
30782a0261c88c467064b3f974204041.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
30782a0261c88c467064b3f974204041.exe
Resource
win10v2004-20231215-en
General
-
Target
30782a0261c88c467064b3f974204041
-
Size
33KB
-
MD5
30782a0261c88c467064b3f974204041
-
SHA1
a6f2c732b13a68aa43857338c29406ce48592619
-
SHA256
14f54e7df47d69e65c1a2674f8dfccbbf0f83af340cc8d5d91ea2f737e7b0c7a
-
SHA512
521926a36c0393a770c61c74511ac89c3cc1b84a52169e754fc63aef95782c2d0179408dfc6ad354a0df6cac8702a534b6ab6a2132237b15c9a1bb86ce59818c
-
SSDEEP
384:HEjaT25B5xDrxH/ujY7xwgSRjpmzGwJA/iDSe/6cAWWxmjYDN7:HE7PhmjszI/iDSgXfoDN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30782a0261c88c467064b3f974204041
Files
-
30782a0261c88c467064b3f974204041.exe windows:4 windows x86 arch:x86
400ac9175f6251f004f678f40a2ac2ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBAndTimeoutsW
CallNamedPipeA
CloseConsoleHandle
CloseHandle
DebugActiveProcess
DisableThreadLibraryCalls
DuplicateConsoleHandle
EnumCalendarInfoA
EnumResourceTypesW
EraseTape
ExitProcess
FindFirstFileExW
GetCommProperties
GetCommandLineW
GetConsoleAliasExesW
GetConsoleFontInfo
GetConsoleScreenBufferInfo
GetCurrencyFormatW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetFileAttributesW
GetLastError
GetLocalTime
GetModuleHandleW
GetNamedPipeInfo
GetNumberOfConsoleFonts
GetPriorityClass
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProcessTimes
GetProfileStringA
GetStartupInfoW
GetSystemDirectoryA
GetSystemPowerStatus
GetSystemTime
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetUserDefaultLCID
GetUserDefaultLangID
GetVersion
HeapDestroy
LocalUnlock
LockFile
OpenMutexW
QueueUserAPC
RaiseException
ReadConsoleInputA
ReadFileEx
ResetEvent
ResumeThread
RtlZeroMemory
ScrollConsoleScreenBufferA
SearchPathW
SetConsoleCursorInfo
SetConsoleFont
SetConsoleHardwareState
SetConsoleIcon
SetConsoleNumberOfCommandsW
SetConsoleTitleA
SetCurrentDirectoryW
SetFileAttributesA
SetHandleInformation
SetLastError
SetLocaleInfoW
SetNamedPipeHandleState
SetProcessShutdownParameters
SetSystemTimeAdjustment
ShowConsoleCursor
VirtualProtect
WaitCommEvent
WriteConsoleInputW
WriteConsoleOutputA
WritePrivateProfileSectionW
WritePrivateProfileStringA
_hwrite
_lwrite
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
user32
AppendMenuW
BroadcastSystemMessageW
CallNextHookEx
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeDisplaySettingsExW
CharUpperA
CharUpperW
CharUpperBuffW
ChildWindowFromPoint
CopyAcceleratorTableA
CopyIcon
CreateCursor
CreateIconFromResource
CreateIconFromResourceEx
CreateMDIWindowA
CreateWindowExW
DdeCreateDataHandle
DdeCreateStringHandleA
DdeFreeDataHandle
DdeKeepStringHandle
DdeQueryConvInfo
DlgDirListComboBoxA
DlgDirSelectExW
DrawIcon
EnumDesktopsW
EnumDisplaySettingsA
FillRect
FindWindowExW
FlashWindow
FrameRect
GetClipCursor
GetCursor
GetCursorInfo
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetLastInputInfo
GetMenu
GetMenuItemCount
GetMessageW
GetParent
GetProcessWindowStation
GetScrollRange
GetTopWindow
GetWindowContextHelpId
GetWindowDC
GetWindowWord
IsChild
IsIconic
LoadKeyboardLayoutA
LoadStringW
MsgWaitForMultipleObjectsEx
OemToCharA
OpenDesktopA
PostThreadMessageW
PtInRect
RealGetWindowClassW
ReleaseDC
ScrollWindow
SetActiveWindow
SetClassLongA
SetCursorPos
SetDeskWallpaper
SetFocus
SetLayeredWindowAttributes
SetMessageQueue
ShowCursor
SwapMouseButton
TileWindows
ToUnicodeEx
UnhookWinEvent
UnhookWindowsHook
wvsprintfA
gdi32
CreateDCW
CreateDIBPatternBrush
CreateICW
DeleteColorSpace
EnumEnhMetaFile
EnumMetaFile
FixBrushOrgEx
FrameRgn
GdiComment
GdiGetBatchLimit
GetBkColor
GetBkMode
GetBoundsRect
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetICMProfileW
GetMiterLimit
GetPixel
GetTextCharacterExtra
LineTo
ModifyWorldTransform
MoveToEx
OffsetWindowOrgEx
PatBlt
PlgBlt
PolyPatBlt
PolyPolygon
SelectObject
SetColorSpace
SetDeviceGammaRamp
SetFontEnumeration
SetMagicColors
SetPolyFillMode
SetRelAbs
SetStretchBltMode
SetTextAlign
SetTextColor
StartPage
StrokeAndFillPath
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mrgv Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bjxi Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ