Static task
static1
Behavioral task
behavioral1
Sample
2361b2fb4e531e71fb8fa5c5099609a3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2361b2fb4e531e71fb8fa5c5099609a3.exe
Resource
win10v2004-20231215-en
General
-
Target
2361b2fb4e531e71fb8fa5c5099609a3
-
Size
567KB
-
MD5
2361b2fb4e531e71fb8fa5c5099609a3
-
SHA1
e12ceac6ade8adc813d8ae717c66b5385e5641f6
-
SHA256
7afc8788e9592ffe7e03ad38ca1392c8037a58dcfed9983afa0c8e98cc854744
-
SHA512
be9317f28bc94692edfe394d87fe3a45bf5e54f157e5c5367a1385e61d9e0ebbffa574e6243f2c07157fc5e24670dda9b3d0f75553a333c91cdc8ce9c641060e
-
SSDEEP
12288:z+nyIgUMxIqL4qvEam8PJ5LDQS9gGDfmofWYHVGbxgN:vybSdvrmwuS9gyZWY1Gd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2361b2fb4e531e71fb8fa5c5099609a3
Files
-
2361b2fb4e531e71fb8fa5c5099609a3.exe windows:4 windows x86 arch:x86
521f5d11b323fcd20d816f4f761f4abf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFormatDrive
ShellExecuteW
SHFileOperationW
SheChangeDirA
SHEmptyRecycleBinW
gdi32
CopyEnhMetaFileA
SetBkColor
UpdateICMRegKeyA
EnumICMProfilesW
GetCharABCWidthsA
ExcludeClipRect
ResetDCA
UpdateColors
ArcTo
PtInRegion
ResizePalette
GetCharWidthFloatA
CreateSolidBrush
EnumFontsA
GetCharWidth32A
GetAspectRatioFilterEx
user32
IsCharAlphaNumericA
IsDialogMessage
CreateMDIWindowW
GetClipboardViewer
GetSystemMetrics
SetDlgItemTextA
RegisterClassExA
DdeQueryStringW
DrawAnimatedRects
RegisterClassA
SetCursorPos
SendMessageA
comdlg32
ChooseFontA
ReplaceTextA
PrintDlgA
GetOpenFileNameW
comctl32
InitCommonControlsEx
kernel32
InterlockedIncrement
GetCurrentProcessId
GetConsoleMode
RemoveDirectoryA
CompareStringW
GetOEMCP
TlsAlloc
LCMapStringW
AllocConsole
SetFilePointer
FlushFileBuffers
GetACP
lstrlenA
WriteFile
VirtualFree
GetEnvironmentStringsA
GetStringTypeW
CreateMutexA
SetCurrentDirectoryW
GetLongPathNameA
GetSystemTimeAsFileTime
OpenProcess
FindAtomA
EnterCriticalSection
SetStdHandle
ReadFileEx
GetPriorityClass
RtlUnwind
VirtualAlloc
EnumDateFormatsA
CompareStringA
GetVersionExA
GetDateFormatA
TlsGetValue
MultiByteToWideChar
DebugBreak
OutputDebugStringW
GetTickCount
WritePrivateProfileStructW
GetLastError
HeapDestroy
SetComputerNameA
SetEnvironmentVariableA
HeapFree
GetUserDefaultLCID
HeapCreate
GetEnvironmentStringsW
CreateEventW
GetStringTypeA
RaiseException
EnumSystemLocalesA
ExitProcess
GetFileType
IsDebuggerPresent
OpenMutexA
VirtualQuery
LeaveCriticalSection
WriteConsoleA
GlobalGetAtomNameW
IsValidCodePage
LoadLibraryW
GetTimeZoneInformation
SetHandleCount
GetStartupInfoA
LoadLibraryA
QueryPerformanceCounter
CreateFileA
IsBadReadPtr
InitializeCriticalSection
CloseHandle
GetModuleFileNameW
InterlockedExchange
GetLocaleInfoA
TerminateProcess
EnumTimeFormatsA
GetLocaleInfoW
MoveFileA
FreeLibrary
GetProcAddress
LocalUnlock
GetConsoleOutputCP
SetUnhandledExceptionFilter
SetLastError
FreeEnvironmentStringsA
LCMapStringA
IsValidLocale
DeleteCriticalSection
WriteConsoleW
CommConfigDialogW
OutputDebugStringA
TlsFree
ReadFile
TlsSetValue
GetFullPathNameW
GetStdHandle
GetConsoleCP
GetModuleFileNameA
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
GetCurrentProcess
GetCPInfo
DosDateTimeToFileTime
SetConsoleCtrlHandler
HeapReAlloc
GetCommandLineA
GetProcessHeap
WideCharToMultiByte
GetCurrentThread
GetEnvironmentStrings
FreeEnvironmentStringsW
GetModuleHandleA
HeapValidate
UnhandledExceptionFilter
GetTimeFormatA
Sections
.text Size: 384KB - Virtual size: 383KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ