Static task
static1
Behavioral task
behavioral1
Sample
02a00c52d79bad745e33b1df7eb05560.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02a00c52d79bad745e33b1df7eb05560.exe
Resource
win10v2004-20231215-en
General
-
Target
02a00c52d79bad745e33b1df7eb05560
-
Size
368KB
-
MD5
02a00c52d79bad745e33b1df7eb05560
-
SHA1
46e2e1f72f4b5a7284edb12409959f035ec2805d
-
SHA256
d3436cc5759c409a1d65001a55373e0583ebfdfd1fbb04b7e68e701bdddf716b
-
SHA512
c9eb8d9d895bc46de1e98849ccb04a967b05e7239b1ef082ccdf245dd16c5bfb2bf82e7230c72ca1fd2200568c8497861475535bd86657612fdc4c81b6f7e820
-
SSDEEP
6144:5hvK75OZJwTOq1JZkqoOQt/OdrjOkNlvC7cj0ay4IJgRdWi+DinGJa4EDK:5W5OZJaOqLkOj+7I1ykRd6DinAFEO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a00c52d79bad745e33b1df7eb05560
Files
-
02a00c52d79bad745e33b1df7eb05560.exe windows:4 windows x86 arch:x86
ea2c41944551ebe3f550d1799e3501d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
VirtualQueryEx
GetSystemTimeAsFileTime
SetConsoleWindowInfo
RaiseException
ReadConsoleInputW
GetProfileIntA
PrepareTape
LocalSize
_llseek
EnumCalendarInfoA
OpenFile
WritePrivateProfileStringA
FindResourceExW
SetLastError
VirtualProtect
GetVersionExA
GetCommandLineA
_lread
EndUpdateResourceA
ExitProcess
EnumSystemCodePagesW
IsBadReadPtr
LocalReAlloc
GlobalGetAtomNameW
GetFileInformationByHandle
_lclose
OutputDebugStringW
_hread
ConnectNamedPipe
GetSystemTimeAdjustment
GetSystemDirectoryW
SetThreadLocale
CreateWaitableTimerA
SetErrorMode
SearchPathW
GetPrivateProfileStringW
GlobalAddAtomW
GetOEMCP
PurgeComm
GetWindowsDirectoryA
AreFileApisANSI
SetProcessShutdownParameters
GlobalAddAtomA
WriteConsoleOutputCharacterA
Beep
RemoveDirectoryW
GetFileAttributesA
QueryDosDeviceA
SetCommMask
SetThreadPriorityBoost
GetCPInfo
SetHandleCount
GetStringTypeExW
FatalAppExitA
GetUserDefaultLCID
ReadConsoleA
user32
SetLastErrorEx
DestroyIcon
SetWindowRgn
IsCharUpperA
SetUserObjectSecurity
ValidateRect
DrawTextA
IsIconic
InternalGetWindowText
GetDialogBaseUnits
CharLowerBuffW
DialogBoxParamW
CharNextExA
RegisterClipboardFormatW
PostThreadMessageW
GetMenuItemInfoA
SendMessageTimeoutA
SendNotifyMessageA
LoadIconW
CharNextW
LoadBitmapA
CallNextHookEx
DrawIconEx
DrawAnimatedRects
CharLowerW
CheckDlgButton
GetPropW
ArrangeIconicWindows
IsWindowUnicode
ScrollWindowEx
SetWindowLongA
RedrawWindow
RegisterClassA
TranslateAcceleratorA
MsgWaitForMultipleObjects
GetWindowInfo
CreateCaret
GetClipboardFormatNameA
GetCapture
GetTabbedTextExtentA
ReplyMessage
UnregisterDeviceNotification
DestroyCursor
UnregisterHotKey
PostThreadMessageA
gdi32
GetCurrentPositionEx
CreateEnhMetaFileW
LineTo
SetPolyFillMode
ResizePalette
PolyPolyline
ExtTextOutA
SetBkMode
SetStretchBltMode
GetTextExtentExPointW
GetCharWidth32W
CreateMetaFileA
SetViewportExtEx
BeginPath
StrokeAndFillPath
ExcludeClipRect
CreateBitmap
TextOutW
GetSystemPaletteUse
PtInRegion
EnumEnhMetaFile
GetCharWidth32A
comdlg32
FindTextW
advapi32
DuplicateTokenEx
RegLoadKeyW
OpenSCManagerW
StartServiceW
RegQueryValueA
StartServiceCtrlDispatcherW
CryptVerifySignatureW
CryptGetUserKey
RegUnLoadKeyA
CreatePrivateObjectSecurity
GetSecurityDescriptorGroup
RegEnumKeyExA
GetSecurityDescriptorOwner
shell32
SHGetDesktopFolder
DragFinish
DragQueryPoint
SHGetPathFromIDListA
SHBrowseForFolderA
ole32
CoFileTimeNow
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoQueryProxyBlanket
OleCreateLink
OleLockRunning
CoGetClassObject
CoDisconnectObject
StgCreateStorageEx
oleaut32
SetErrorInfo
SafeArrayCreate
SysStringLen
SysFreeString
LoadTypeLi
SafeArrayRedim
comctl32
ImageList_Destroy
shlwapi
SHCreateStreamOnFileW
StrCmpNIW
SHDeleteKeyA
wnsprintfW
SHCopyKeyW
StrTrimW
PathCombineA
SHEnumValueW
SHRegCreateUSKeyW
StrToIntExW
Sections
.text Size: 332KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE