Static task
static1
Behavioral task
behavioral1
Sample
33432911c43139fd49298ffe4de47122.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
33432911c43139fd49298ffe4de47122.exe
Resource
win10v2004-20231215-en
General
-
Target
33432911c43139fd49298ffe4de47122
-
Size
153KB
-
MD5
33432911c43139fd49298ffe4de47122
-
SHA1
1a1db618a818a5e3a4b3da516b5612b904746d39
-
SHA256
791150820448b1a3b5b175a28a2c2f258d2976a72328ad8cf537cd0e95527368
-
SHA512
ab93ae6be8453f5ce0217a80eec8e021d6e29cd428b0cd1b33e3bdbb7c9eb147b07db093fc97133fd34e632bb4b841275b0204d7dbd5a87a9cad86b44bd246c5
-
SSDEEP
3072:WOwGepl3zrtRHgK29UKqKnaPuhPVvs4t44+FAWDcOW:qbhQ4UaPuD5uHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33432911c43139fd49298ffe4de47122
Files
-
33432911c43139fd49298ffe4de47122.exe windows:5 windows x86 arch:x86
5a39c3a171317c58414f58171aae605b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingA
FreeResource
CopyFileExA
GetPriorityClass
OpenFile
DeleteFileA
ExitThread
AddAtomA
FindClose
ReadFile
DeleteFileW
CopyFileA
WriteFile
GetLocalTime
GetStdHandle
CopyFileExA
DeleteFileA
OpenFileMappingA
CopyFileA
FatalExit
FindAtomW
GetLastError
GetPriorityClass
FreeResource
CreateDirectoryA
AddAtomW
AddAtomA
GetStdHandle
GlobalFree
FlushFileBuffers
OpenFile
ExitThread
WriteFile
GetLocalTime
GetFileTime
GetCommandLineA
GetFileType
DeleteAtom
GetCPInfo
FindAtomA
FindClose
ReadFile
CopyFileExW
AddAtomA
AddAtomW
OpenFile
DeleteAtom
DeleteFileA
GlobalFree
OpenFileMappingA
FreeResource
CopyFileA
DeleteFileW
FindClose
GetPriorityClass
ExitThread
FindAtomA
CopyFileA
OpenFileMappingA
GetStdHandle
CopyFileExA
GetCommandLineA
ReadFile
GetFileType
ExitProcess
WriteFile
DeleteFileA
GetLocalTime
DeleteAtom
FindAtomW
GetCPInfo
GetLastError
GlobalFree
FindAtomA
ExitProcess
GetFileType
CopyFileExA
FindAtomW
FlushFileBuffers
GetFileTime
OpenFile
GetLastError
GetCommandLineA
ReadFile
WriteFile
CopyFileExW
DeleteAtom
FatalExit
ExitThread
DeleteFileW
FindAtomW
AddAtomW
WriteFile
ExitThread
GetLocalTime
GetLastError
CopyFileA
ExitProcess
GetPriorityClass
GetFileTime
FatalExit
GetCommandLineA
GetFileType
FreeResource
GetStdHandle
GetPriorityClass
ExitThread
CreateDirectoryA
GetLocalTime
FindAtomA
OpenFileMappingA
DeleteFileA
OpenFile
GetLastError
GetFileType
ExitProcess
FlushFileBuffers
WriteFile
ReadFile
AddAtomW
FreeResource
CopyFileExA
AddAtomA
FindClose
GetLastError
OpenFileMappingA
ReadFile
OpenFile
FindAtomW
GetLocalTime
CopyFileExW
CreateDirectoryA
AddAtomA
FatalExit
GetFileType
FreeResource
AddAtomW
DeleteFileW
FindClose
DeleteAtom
GetPriorityClass
FindAtomA
DeleteFileA
GetCommandLineA
ExitThread
FindAtomA
AddAtomW
GetCPInfo
GlobalFree
ReadFile
OpenFileMappingA
DeleteAtom
GetLocalTime
GetLastError
FlushFileBuffers
GetPriorityClass
DeleteFileW
FreeResource
user32
AppendMenuW
DrawTextA
GetMenu
CreateIcon
DrawTextW
GetDlgItem
LoadMenuA
AppendMenuA
AlignRects
GetWindowTextA
DrawIcon
GetDC
BeginPaint
CloseWindow
IsWindow
GetWindowTextLengthA
CalcMenuBar
LoadCursorA
AlignRects
CopyImage
CopyIcon
IsWindow
CloseWindow
EndDialog
DrawIconEx
InsertMenuA
GetMenu
DrawTextA
AppendMenuA
IsMenu
GetWindowTextA
DialogBoxParamA
DrawIcon
DrawTextA
GetWindowTextA
GetWindowTextLengthA
LoadMenuA
DrawIcon
GetMenu
GetFocus
DrawIconEx
BlockInput
GetDC
CopyRect
EndDialog
IsMenu
IsWindow
AppendMenuW
CopyImage
AlignRects
DrawTextW
AppendMenuA
GetWindowTextA
GetWindowTextLengthA
GetFocus
GetDC
BlockInput
DialogBoxParamW
CloseWindow
DialogBoxParamA
GetMenu
AppendMenuW
EndDialog
CopyImage
IsWindow
advapi32
RegQueryValueW
RegOpenKeyW
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegReplaceKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegReplaceKeyW
RegEnumValueA
RegDeleteKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegFlushKey
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyA
RegDeleteValueA
RegCreateKeyW
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegLoadKeyA
RegEnumKeyExW
RegDeleteValueW
RegEnumKeyExA
RegReplaceKeyA
RegDeleteValueW
RegFlushKey
RegEnumKeyW
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyA
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumKeyA
RegCreateKeyA
RegLoadKeyW
RegOpenKeyA
RegCreateKeyExA
RegGetKeySecurity
RegQueryValueW
RegCreateKeyW
RegDeleteKeyA
RegFlushKey
RegLoadKeyA
RegOpenKeyW
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyExA
RegQueryInfoKeyW
RegEnumValueA
RegEnumValueW
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyExW
RegQueryValueA
RegEnumKeyW
RegQueryValueW
RegReplaceKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegLoadKeyW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyExA
RegDeleteValueW
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegQueryInfoKeyA
RegOpenKeyW
RegQueryValueA
RegEnumValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyW
Sections
.gb54 Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d9aed Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5ac3 Size: 107KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c214b Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ