Static task
static1
Behavioral task
behavioral1
Sample
1f707268945da9c93f2e7b1f066bdd8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f707268945da9c93f2e7b1f066bdd8b.exe
Resource
win10v2004-20231215-en
General
-
Target
1f707268945da9c93f2e7b1f066bdd8b
-
Size
40KB
-
MD5
1f707268945da9c93f2e7b1f066bdd8b
-
SHA1
28200e8909041f39ddeba037ee8c7c60c724c368
-
SHA256
bdc5d2de73d7eab9ae9570527a1a1df717ed9858cae669099389f221ea2183a3
-
SHA512
32568907414dc7a471a935eb1b5b296a9e7b3f32131f8337e205e4143f91fd0fcfdb05a8b91db4139eedc90bb9839aeed522b903786ef25539f37469889d2873
-
SSDEEP
384:eTFCB6dIl+80GKaa9AXIxUPf4x3/hTZk67Joy:oUBJl+80ValTPk3pD9o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f707268945da9c93f2e7b1f066bdd8b
Files
-
1f707268945da9c93f2e7b1f066bdd8b.exe windows:4 windows x86 arch:x86
11a0438be2bdac85f985432f6797c3df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DrawTextA
AlignRects
AppendMenuW
GetCursor
CalcMenuBar
CreateIcon
GetFocus
GetWindowTextLengthA
CopyRect
CopyImage
InsertMenuA
EndDialog
CloseWindow
DialogBoxParamW
DialogBoxParamA
IsMenu
AppendMenuA
LoadCursorA
LoadMenuA
kernel32
Sleep
FindAtomA
CopyFileW
CopyFileA
OpenFileMappingA
CreateDirectoryA
FindFirstFileA
CopyFileExA
DeleteFileW
ExitThread
DeleteFileA
CopyFileExW
GetCommandLineA
ReadConsoleA
GlobalFree
GetLastError
GetStdHandle
SetLastError
GetComputerNameA
gdi32
BitBlt
DeleteObject
GetBitmapBits
CancelDC
GetPixel
AddFontResourceTracking
BeginPath
GetBrushOrgEx
AbortPath
CopyMetaFileA
GetClipBox
ExcludeClipRect
GetCurrentPositionEx
AddFontResourceA
DeleteDC
ExtTextOutA
ClearBrushAttributes
advapi32
RegQueryValueA
RegEnumKeyExW
RegLoadKeyW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegReplaceKeyA
RegQueryInfoKeyW
RegDeleteKeyW
RegLoadKeyA
RegCreateKeyExA
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExW
RegQueryValueW
RegFlushKey
RegEnumKeyW
comctl32
ImageList_AddMasked
InitCommonControls
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_DragEnter
ImageList_Create
ImageList_Replace
ImageList_Copy
ImageList_LoadImageA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ