Static task
static1
Behavioral task
behavioral1
Sample
01534625d2d1f84de88227e9e4c826ed.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01534625d2d1f84de88227e9e4c826ed.exe
Resource
win10v2004-20231215-en
General
-
Target
01534625d2d1f84de88227e9e4c826ed
-
Size
84KB
-
MD5
01534625d2d1f84de88227e9e4c826ed
-
SHA1
e37ce2b8e5b2b697f403431d7c78aa0ab4d9cf2f
-
SHA256
530f027122663b46840128aaebfbc0aaf493b758e1ba6b713e8c0ce963faeb92
-
SHA512
a442754b8b5c8911ab4ef13fe749e5cbcb98da80495901ef111d7cf7e51f55817ecee12b3ee6c2a65068145a043a4be6c9821a886ae0b5037dd44a28034c868c
-
SSDEEP
768:W+HlMAG7Sc9r7URydD67U0CniqD9YyiU060x6OpayBiiBhu456nn9DhYLR:nlQS27UM2yiGo9/6zYLR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01534625d2d1f84de88227e9e4c826ed
Files
-
01534625d2d1f84de88227e9e4c826ed.exe windows:4 windows x86 arch:x86
4453ec4fab19a764bea15dcacbb8cca9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetStartupInfoW
SetThreadPriority
CreateThread
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
GetTickCount
GetModuleHandleA
user32
ScreenToClient
GetCursorPos
SendMessageA
ReleaseCapture
EndPaint
BeginPaint
CreateWindowExA
UpdateWindow
KillTimer
SetTimer
ReleaseDC
GetDC
GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
FrameRect
AnimateWindow
GetDlgItem
DialogBoxParamA
SetDlgItemTextA
GetDlgItemTextA
PostQuitMessage
InvalidateRect
SetWindowLongA
CallWindowProcA
EndDialog
GetClientRect
DrawTextA
gdi32
SelectObject
CreateSolidBrush
CreateFontA
CreateDIBSection
DeleteObject
GetTextExtentPoint32A
SetTextColor
SetBkMode
BitBlt
Rectangle
CreateCompatibleDC
DeleteDC
CreatePen
comctl32
_TrackMouseEvent
msvcrt
abs
sin
fabs
memset
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
pow
free
_ftol
malloc
strcpy
strlen
calloc
memcpy
rand
srand
sprintf
winmm
waveOutGetPosition
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutWrite
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ