Static task
static1
Behavioral task
behavioral1
Sample
1f4e07bbe1a979526abaa5e19a2f2bee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f4e07bbe1a979526abaa5e19a2f2bee.exe
Resource
win10v2004-20231215-en
General
-
Target
1f4e07bbe1a979526abaa5e19a2f2bee
-
Size
385KB
-
MD5
1f4e07bbe1a979526abaa5e19a2f2bee
-
SHA1
5894c5b80a4e9f21afb7c932c1c58249d3e20af2
-
SHA256
886f7873ad34543e66e640ffe157689f5a6a0c21d6312d1abe29011e887216e8
-
SHA512
29bdaaccfdeb85d0405811f1566c0a5ea621f79f6c8a7c2eb15ccd3337c58e161c03cdb109878ad9cb9654906704712961303d1ccb5676b201ca1165ff499fd6
-
SSDEEP
12288:1ZKYaEVxGy+y19eMxF4TZBGp+nUz9enSE:1wwGy+y19egiIUnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f4e07bbe1a979526abaa5e19a2f2bee
Files
-
1f4e07bbe1a979526abaa5e19a2f2bee.exe windows:4 windows x86 arch:x86
a72f9f107f3602a86e8bb6ef863c159f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrcpyA
lstrlenA
Sleep
SetEvent
VirtualFree
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
GetLastError
VirtualProtect
GetModuleHandleA
GetCurrentThreadId
ResumeThread
WriteFile
SuspendThread
CreateFileA
LocalAlloc
GlobalFree
GlobalAlloc
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
LCMapStringA
FreeLibrary
GetStringTypeA
MultiByteToWideChar
RaiseException
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
GetVersion
LCMapStringW
GetCommandLineA
GetStartupInfoA
GetModuleFileNameA
VirtualQuery
CreateEventA
LoadLibraryW
GetProcAddress
CloseHandle
GetStringTypeW
ExitProcess
user32
UpdateWindow
LoadIconA
LoadCursorA
ShowWindow
EndPaint
DrawTextA
GetClientRect
CreateWindowExA
PostQuitMessage
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
LoadStringA
EndDialog
AttachThreadInput
BringWindowToTop
RegisterClassExA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
IsWindow
IsWindowVisible
IsRectEmpty
SetRect
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
RegisterClassA
GetMessageA
gdi32
GetDIBits
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SetROP2
GetObjectA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VariantInit
pdh
PdhCollectQueryData
PdhGetCounterInfoA
PdhConnectMachineA
PdhGetDataSourceTimeRangeW
wininet
InternetOpenW
InternetCloseHandle
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 335KB - Virtual size: 715KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE