Static task
static1
Behavioral task
behavioral1
Sample
034bcaeefec8e2384d87c6e22277af67.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
034bcaeefec8e2384d87c6e22277af67.exe
Resource
win10v2004-20231215-en
General
-
Target
034bcaeefec8e2384d87c6e22277af67
-
Size
53KB
-
MD5
034bcaeefec8e2384d87c6e22277af67
-
SHA1
3d1dd1e407600ca7a8f55c9d7bed28fdce9790b6
-
SHA256
3dbe6b1446ac365f1512a5a98b89a982f111b10ad119248b2717225ff9cc62c6
-
SHA512
2b2e0f5748311e7eea0d25a6aee471e85cd90f4115465c21b72d3ddcd801e370eb3e0e294e22236c7b2df71b1a0146f03e7706ee4d6d47575372a76c22b59b8e
-
SSDEEP
768:w5v34dSfi3rSGVhRxXPwU3hSZtr8RsKJIwlNFbrwR8qmihfCQ:w5v3Hfib7XPwU38tr8RsM35rwyAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034bcaeefec8e2384d87c6e22277af67
Files
-
034bcaeefec8e2384d87c6e22277af67.exe windows:4 windows x86 arch:x86
dacdbf0b245504a2500f3ada59b07bef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DrawTextW
DrawTextA
CreateIcon
GetCursor
DrawIconEx
EndDialog
CopyImage
DrawIcon
CopyRect
GetWindowTextA
advapi32
RegCreateKeyExA
RegCreateKeyW
RegDeleteKeyW
RegSetValueA
RegOpenKeyExA
RegSetValueW
RegEnumValueW
RegQueryValueA
RegQueryValueExW
RegCreateKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExW
comctl32
ImageList_DrawEx
DrawStatusTextW
CreateToolbarEx
ImageList_GetIcon
CreateUpDownControl
CreateToolbar
ImageList_LoadImageW
ImageList_GetIconSize
CreateMappedBitmap
ImageList_LoadImageA
MenuHelp
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 56KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 197B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ