Static task
static1
Behavioral task
behavioral1
Sample
02c8d37c108439c5c5e3a7ad5a496c90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02c8d37c108439c5c5e3a7ad5a496c90.exe
Resource
win10v2004-20231215-en
General
-
Target
02c8d37c108439c5c5e3a7ad5a496c90
-
Size
147KB
-
MD5
02c8d37c108439c5c5e3a7ad5a496c90
-
SHA1
7573b8a36e182322bc1a0a7d3a3040dc73ae9c79
-
SHA256
a1e41d4e1849f980f9c7b3dc95d29b9af1408281e24b3ac2d44de2c0ec689fea
-
SHA512
4d3d480fce4d6e26a62c477d657317072adb3408ed6dcf3e29dff6d49c9ca14547c8845e8df8e11bec9f2cb0941c36986be23c7ffb3a34e352d7fe6110d7b7ba
-
SSDEEP
1536:RF0FUpuFnRX/JkGp9m7armnJu4PCI5uAgXkxlgyUBexfqGdo4X:RFmUpMkGXbyrCucH4xf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02c8d37c108439c5c5e3a7ad5a496c90
Files
-
02c8d37c108439c5c5e3a7ad5a496c90.exe windows:4 windows x86 arch:x86
508c49333ab91e9f695df8e9ae55468a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenu
GetDC
DrawIconEx
DialogBoxParamW
AppendMenuW
DrawIcon
DrawTextW
DrawTextA
BlockInput
EndDialog
GetFocus
CloseWindow
GetCursor
IsMenu
GetMenu
GetWindowTextLengthA
IsWindow
GetFocus
CopyRect
DrawIcon
LoadCursorA
LoadMenuA
CopyIcon
DrawIconEx
comctl32
ImageList_Merge
ImageList_GetImageCount
ImageList_Read
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_DragMove
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_Read
ImageList_GetIconSize
ImageList_DragMove
ImageList_GetIcon
ImageList_GetImageCount
ImageList_EndDrag
ImageList_Remove
ImageList_Draw
ImageList_DragLeave
ImageList_Copy
ImageList_DrawIndirect
ImageList_GetImageRect
ImageList_BeginDrag
advapi32
RegReplaceKeyW
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegEnumValueW
RegDeleteValueA
RegLoadKeyA
RegOpenKeyA
RegGetKeySecurity
RegEnumKeyExW
RegQueryInfoKeyA
RegEnumKeyW
RegEnumKeyExA
RegOpenKeyExW
kernel32
FindAtomA
WriteFile
SetLastError
GetComputerNameA
GlobalFree
GetCommandLineA
DeleteFileW
GetLastError
ExitThread
DeleteAtom
CreateDirectoryA
GetFileTime
Sleep
GetStdHandle
DeleteFileA
GetFileSize
GetCommandLineA
SetLastError
GetComputerNameA
GetFileTime
FindAtomA
GetStdHandle
Sleep
CopyFileExW
CreateDirectoryA
DeleteAtom
ExitThread
GetLastError
GetCPInfo
CopyFileExA
SetLastError
DeleteAtom
FindFirstFileA
GetLastError
CreateProcessA
CopyFileA
GetConsoleMode
CopyFileExW
CreateThread
GetCommandLineA
Sleep
FindAtomA
WriteFile
OpenFileMappingA
CreateDirectoryA
GetLastError
FindFirstFileA
Sleep
FindAtomA
OpenFile
DeleteAtom
ReadConsoleA
CopyFileExA
OpenFileMappingA
ExitThread
CopyFileA
DeleteFileA
GetFileTime
CopyFileW
CreateProcessA
DeleteFileW
GetStdHandle
gdi32
GetClipBox
CreateSolidBrush
AbortPath
GetBrushOrgEx
AddFontResourceA
DeleteDC
RestoreDC
AddFontMemResourceEx
CloseMetaFile
GetCurrentPositionEx
ExtTextOutA
DeleteObject
GetPixel
CloseFigure
AddFontResourceW
CopyMetaFileA
CancelDC
GetBitmapBits
BeginPath
GetCurrentPositionEx
ExtTextOutA
AddFontResourceW
AddFontResourceA
GetDCOrgEx
CopyMetaFileA
DeleteObject
AddFontResourceTracking
GetPixel
AddFontResourceExW
GetBrushOrgEx
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ