Static task
static1
Behavioral task
behavioral1
Sample
1a808ab3bf78a30e86f7d62390659f14.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a808ab3bf78a30e86f7d62390659f14.exe
Resource
win10v2004-20231215-en
General
-
Target
1a808ab3bf78a30e86f7d62390659f14
-
Size
199KB
-
MD5
1a808ab3bf78a30e86f7d62390659f14
-
SHA1
88c57589dbe5f68d3aa250359d89ccdd4bb56e94
-
SHA256
cb87a19bf9a8a5f240a702972d9a0c7bd4d7af3daa96a2b4c1c00adf7113b081
-
SHA512
837d889d943ebe1ee6924854fa8bc63af6551e1450353a0db762b5e95f1b39541e17b1a380a7cd20928df92eeb2f4bfa77d3f94221db3b7b4a2b40ac03016e60
-
SSDEEP
6144:U+oB1UHzB6eAjvqwkT1RSL3IWskqUbv3M4Oj/n:U9ytqzqwGRSL3IHx4OjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a808ab3bf78a30e86f7d62390659f14
Files
-
1a808ab3bf78a30e86f7d62390659f14.exe windows:4 windows x86 arch:x86
468444aaf4a32020be796e15f1eb8729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder
user32
GetClassInfoA
FillRect
EndPaint
EnumChildWindows
DrawMenuBar
GetFocus
GetDCEx
DrawIconEx
EmptyClipboard
GetDesktopWindow
FrameRect
GetCursorPos
EnumThreadWindows
GetCursor
GetClassNameA
EnableWindow
EnableScrollBar
GetDC
EnableMenuItem
FindWindowA
GetCapture
EqualRect
GetClientRect
GetForegroundWindow
DrawTextA
EnumWindows
GetClassLongA
GetClipboardData
GetActiveWindow
GetDlgItem
msvcrt
mbstowcs
fabs
wcscspn
rand
exp
time
tolower
log
exit
advapi32
RegEnumKeyExA
oleaut32
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
VariantCopyInd
SysStringLen
GetErrorInfo
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
gdi32
GetObjectA
GetRgnBox
GetCurrentPositionEx
CreateFontIndirectA
GetDIBits
GetClipBox
CreateCompatibleBitmap
GetBitmapBits
SelectPalette
CreateCompatibleDC
GetDIBColorTable
CreatePenIndirect
GetPixel
SaveDC
SelectObject
SetTextColor
GetDCOrgEx
RestoreDC
GetPaletteEntries
BitBlt
CreateBrushIndirect
CreatePalette
CreateDIBSection
SetBkColor
CreateBitmap
SetPixel
CreateDIBitmap
SetBkMode
LineTo
CopyEnhMetaFileA
kernel32
GetStartupInfoA
VirtualAllocEx
ExitThread
LoadLibraryA
GlobalFindAtomA
InitializeCriticalSection
RaiseException
HeapAlloc
lstrlenA
GetVersionExA
GlobalAddAtomA
LoadResource
LocalAlloc
GetUserDefaultLCID
LoadLibraryExA
VirtualAlloc
GetThreadLocale
GetStdHandle
LockResource
GetSystemDefaultLangID
GlobalDeleteAtom
GetVersion
GetTickCount
GetModuleFileNameA
GetStringTypeW
ExitProcess
IsBadReadPtr
GetStringTypeA
GlobalAlloc
GetLocaleInfoA
GetProcAddress
HeapFree
GetOEMCP
GetProcessHeap
GetModuleHandleA
GetLocalTime
shlwapi
PathIsContentTypeA
SHDeleteKeyA
SHGetValueA
PathIsDirectoryA
SHQueryInfoKeyA
SHQueryValueExA
comctl32
ImageList_Remove
ImageList_Write
ImageList_Draw
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetBkColor
ImageList_Create
ImageList_Add
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 512B - Virtual size: 303B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 512B - Virtual size: 483B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ