Static task
static1
Behavioral task
behavioral1
Sample
231edaeb568e3592dc94f6d442d01bd0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
231edaeb568e3592dc94f6d442d01bd0.exe
Resource
win10v2004-20231215-en
General
-
Target
231edaeb568e3592dc94f6d442d01bd0
-
Size
80KB
-
MD5
231edaeb568e3592dc94f6d442d01bd0
-
SHA1
fda1ea9d27f16cc2a797d50cb5e874a5c8761620
-
SHA256
7cc19be1188cde7b719e3237bb815cd44fb68ba5e7ed1282cf18b1ab1bae7045
-
SHA512
171390be4ebeaccd2515529f4df8ee75b7930296001b326cb9c0feef42f2650d57942f94621e48b11cd456cf085fcf0719664fba82209fd88d294c35426e0e51
-
SSDEEP
768:WUCVz5bpcjQ86DZZjhZbfXn5naRTMQ9btdjKte6PesAl6WmsPJAoiZPvBRd:sNba5CnbzX5na57ZZKwL560xAXZX3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 231edaeb568e3592dc94f6d442d01bd0
Files
-
231edaeb568e3592dc94f6d442d01bd0.exe windows:4 windows x86 arch:x86
cfffaa2c11ff4b5ba9d523d04f59cd7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
AppendMenuA
AppendMenuW
CalcMenuBar
GetWindowTextLengthA
DrawTextA
LoadMenuA
GetDC
LoadCursorA
CloseWindow
GetWindowTextA
GetFocus
CopyImage
IsWindow
AppendMenuA
InsertMenuA
DrawIconEx
DrawTextW
DialogBoxParamA
GetDlgItem
CopyRect
AppendMenuW
LoadMenuA
BlockInput
DrawIcon
GetCursor
CopyIcon
AlignRects
GetMenu
DialogBoxParamW
advapi32
RegQueryValueW
RegOpenKeyExA
RegEnumKeyW
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyExA
RegEnumValueW
RegReplaceKeyA
RegOpenKeyW
RegReplaceKeyW
RegLoadKeyW
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegDeleteValueW
kernel32
DeleteFileA
GetStdHandle
GetCPInfo
FindAtomA
GetFileSize
GetLastError
ExitThread
DeleteAtom
Sleep
OpenFileMappingA
CopyFileExW
GlobalFree
ReadFile
OpenFile
ReadConsoleA
WriteFile
GetFileTime
CopyFileA
SetLastError
CreateProcessA
DeleteFileA
DeleteAtom
GlobalFree
GetFileTime
GetCommandLineA
GetConsoleMode
SetLastError
ReadFile
FindFirstFileA
WriteFile
CopyFileA
CreateThread
ExitThread
GetFileSize
OpenFileMappingA
GetComputerNameA
OpenFile
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jedata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ