Static task
static1
Behavioral task
behavioral1
Sample
0535b82358ace0e1bddae11fa763b29d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0535b82358ace0e1bddae11fa763b29d.exe
Resource
win10v2004-20231215-en
General
-
Target
0535b82358ace0e1bddae11fa763b29d
-
Size
116KB
-
MD5
0535b82358ace0e1bddae11fa763b29d
-
SHA1
f6996c51193756fcf97065ceed52082467616b99
-
SHA256
5c52678f0aa4b794911fe02470542b24178a15440c694dda373c5e597154b7ea
-
SHA512
46a86bd267a0a07078dba369c4417447e2e2efefba6865f9b9bcb291dc8405652bcf723553c11ade772403dfb6940080da09c9ce20d2c2359d8ab8fc479d9e1d
-
SSDEEP
3072:UhZ11lQTpC6rTCFUMkUSCdOlrE7Fb2mUN2:2ZpQTIC6dJ7d2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0535b82358ace0e1bddae11fa763b29d
Files
-
0535b82358ace0e1bddae11fa763b29d.exe windows:4 windows x86 arch:x86
acbd455787624f0dc3b843383c17235b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MoveWindow
GetWindowThreadProcessId
GetIconInfo
DrawEdge
EnableWindow
IsZoomed
CreateIcon
OpenClipboard
CharNextA
GetSystemMenu
SetScrollPos
IsDialogMessageA
RemovePropA
GetKeyState
GetKeyNameTextA
RegisterClipboardFormatA
CreateMenu
RemoveMenu
MsgWaitForMultipleObjects
SetMenu
GetScrollInfo
FillRect
WaitMessage
ChildWindowFromPoint
TrackPopupMenu
BeginPaint
GetMenuItemCount
GetSubMenu
CharUpperBuffA
DrawAnimatedRects
GetWindowTextA
ShowWindow
GetScrollPos
GetClipboardData
GetSysColorBrush
GetClassInfoA
GetDlgItem
CloseClipboard
GetTopWindow
DrawIcon
GetMenuItemInfoA
GetClassLongA
DrawIconEx
GetMenu
InvalidateRect
SendMessageW
EndPaint
MessageBoxA
FindWindowA
RegisterClassA
ReleaseCapture
GetCursor
GetWindowLongA
DefWindowProcA
GetScrollRange
GetDesktopWindow
RegisterWindowMessageA
GetLastActivePopup
SystemParametersInfoA
EnumThreadWindows
SetScrollInfo
GetMenuStringA
SetClipboardData
EmptyClipboard
GetFocus
DrawMenuBar
GetParent
GetCapture
GetMenuState
SetCapture
UnhookWindowsHookEx
AdjustWindowRectEx
IsWindowUnicode
SetScrollRange
EnableScrollBar
IsRectEmpty
WindowFromPoint
PeekMessageW
UpdateWindow
ClientToScreen
GetWindowLongW
IsWindowVisible
OemToCharA
GetDCEx
LoadIconA
DestroyCursor
ReleaseDC
SetCursor
CallNextHookEx
SetRect
GetWindowPlacement
GetDC
SetWindowLongW
GetKeyboardLayoutList
FrameRect
EnableMenuItem
shell32
SHGetFileInfoA
Shell_NotifyIconA
SHGetFolderPathA
SHFileOperationA
comctl32
ImageList_DrawEx
ImageList_Write
version
VerInstallFileA
VerQueryValueA
VerFindFileA
kernel32
DeleteFileA
CompareStringA
VirtualAlloc
GetModuleHandleA
GetOEMCP
HeapAlloc
GetStringTypeW
ExitProcess
GetLocaleInfoA
GetStringTypeA
GetProcAddress
VirtualAllocEx
GetVersionExA
HeapFree
LocalAlloc
GetModuleFileNameA
ReadFile
ExitThread
comdlg32
ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
gdi32
SelectObject
GetPixel
Sections
CODE Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE