Static task
static1
Behavioral task
behavioral1
Sample
35aee93930fd307f2a2c2e9e6195433b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35aee93930fd307f2a2c2e9e6195433b.exe
Resource
win10v2004-20231215-en
General
-
Target
35aee93930fd307f2a2c2e9e6195433b
-
Size
178KB
-
MD5
35aee93930fd307f2a2c2e9e6195433b
-
SHA1
7c53f165b9bf5a8b7e6edf8c4c844754877fd6a3
-
SHA256
7c7b043b61c84af80885e915498f847bd97507d8e6c61c01bbae6c9689b03baa
-
SHA512
cfdc6993a6c767939ba49fb875ea7f763075a2db164cb6d39cf204c239ef7ee667047203b0b70a9b454892d93730854a98881276d921885aaefa8351f73f31f8
-
SSDEEP
3072:A3gtnf4HO7mAGyo15Ui1PpD0BSNVFn/Wp16j0xcU1EtVg2xWJPfiW:Ltnf4HnScUcBDqsnepw4UVAJyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35aee93930fd307f2a2c2e9e6195433b
Files
-
35aee93930fd307f2a2c2e9e6195433b.exe windows:5 windows x86 arch:x86
f1fac7b15279da2203eb27d5a3c0e660
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EndDoc
WidenPath
GetROP2
CreateFontIndirectA
CreateFontIndirectW
ExtFloodFill
kernel32
GetTickCount
FoldStringW
GetBinaryTypeW
LocalSize
CreateDirectoryA
GetModuleFileNameW
user32
ArrangeIconicWindows
CreateDialogParamW
DlgDirSelectComboBoxExA
SetMenuItemInfoW
SetScrollInfo
GetWindowRect
CharNextW
SendMessageTimeoutW
SetDlgItemTextW
LoadCursorW
GetNextDlgGroupItem
IsCharAlphaA
IsCharAlphaW
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Sections
.dedrde Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vggh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqew Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ereffv Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgdfs Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ