Static task
static1
Behavioral task
behavioral1
Sample
039caa51944b556e8df154802b2f5ba4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
039caa51944b556e8df154802b2f5ba4.exe
Resource
win10v2004-20231222-en
General
-
Target
039caa51944b556e8df154802b2f5ba4
-
Size
572KB
-
MD5
039caa51944b556e8df154802b2f5ba4
-
SHA1
00ce58a0b95992abaee1b71aa0c19d4e95b7e9f0
-
SHA256
4d72af9cd3b8e7a3ca900c0df367ca2613ba27e6fbe00f39a4009d53d3c1ba4e
-
SHA512
aa2e6bd1e4e56171411aeb0dddc29d686e33f2db45e22fc1aad30b57ad8d0305acbf916885bc5512e003900fadbcbe36b43515a8ef4a9eaf053f41c2e20e5254
-
SSDEEP
12288:zGkzQfOBiWD0IcqHQPz/eYL6T0TL+f5M98HLm5u+r65sCIIir0p:zBIORgIjQPz/LLi0TLyMiHLYf65s5IIC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 039caa51944b556e8df154802b2f5ba4
Files
-
039caa51944b556e8df154802b2f5ba4.exe windows:4 windows x86 arch:x86
0ed01cfe863dee739f1f420847c6c1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_Duplicate
user32
LoadCursorFromFileA
MessageBoxW
SystemParametersInfoW
MsgWaitForMultipleObjectsEx
SetMessageQueue
RegisterClassExA
DrawCaption
CreateWindowExW
DdeInitializeA
RegisterClassA
AppendMenuA
GetKeyboardType
ShowWindow
gdi32
CopyEnhMetaFileA
DeleteDC
DeleteEnhMetaFile
GetTextCharset
SetTextColor
SetWindowExtEx
GetBitmapDimensionEx
CreateFontIndirectA
Chord
UpdateICMRegKeyA
GetCurrentPositionEx
CreateRoundRectRgn
GetNearestColor
GetROP2
GetEnhMetaFilePaletteEntries
SetWinMetaFileBits
ColorCorrectPalette
CopyEnhMetaFileW
CreateColorSpaceW
SetTextJustification
CreateDIBSection
CloseMetaFile
GetCharWidthW
PolyPolyline
kernel32
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetConsoleCtrlHandler
IsDebuggerPresent
GetCurrentThreadId
TlsFree
WriteFile
GetStringTypeW
GetModuleHandleW
CreateSemaphoreA
LocalFileTimeToFileTime
GetLocaleInfoW
IsValidLocale
SuspendThread
RtlZeroMemory
GetTempFileNameW
HeapDestroy
FreeEnvironmentStringsW
GetOEMCP
CreateFileA
FindFirstFileExA
GetLocaleInfoA
UnhandledExceptionFilter
GetStartupInfoA
GetModuleFileNameA
ReadFile
CompareStringA
FreeEnvironmentStringsA
ContinueDebugEvent
EnumSystemLocalesA
GetACP
GetPrivateProfileSectionW
GetCommandLineA
GetDateFormatA
SetFilePointer
SetTimeZoneInformation
GlobalFindAtomA
InterlockedDecrement
ExitProcess
DeleteCriticalSection
GetFileType
UnlockFileEx
LeaveCriticalSection
GetTimeZoneInformation
LCMapStringA
GetStdHandle
QueryPerformanceCounter
InterlockedExchange
CreateWaitableTimerA
CompareStringW
SetLastError
VirtualQuery
GetModuleHandleA
MultiByteToWideChar
LoadLibraryA
ReadConsoleInputA
Sleep
GetCurrentProcess
IsValidCodePage
WideCharToMultiByte
GetUserDefaultLCID
HeapReAlloc
WriteConsoleW
OpenMutexA
GetCPInfo
InterlockedIncrement
TerminateProcess
CreateFileMappingW
GetLastError
VirtualFree
GetConsoleCP
GetCurrentThread
HeapFree
FreeLibrary
FlushConsoleInputBuffer
GetSystemTimeAsFileTime
TlsGetValue
SetHandleCount
HeapCreate
GetStringTypeA
RtlUnwind
FreeResource
HeapSize
CloseHandle
GetProcAddress
VirtualAlloc
GetConsoleMode
CreateProcessA
TlsAlloc
GetPrivateProfileStringW
HeapAlloc
GetConsoleOutputCP
SetEnvironmentVariableA
TlsSetValue
CreateMutexA
GetEnvironmentStrings
GetTickCount
EnterCriticalSection
OutputDebugStringW
SetStdHandle
LCMapStringW
FlushFileBuffers
WriteConsoleA
GetCurrentProcessId
GetTimeFormatA
GetVolumeInformationA
Sections
.text Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ