Static task
static1
Behavioral task
behavioral1
Sample
2299a0123f067faa3c0c17c687b752a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2299a0123f067faa3c0c17c687b752a4.exe
Resource
win10v2004-20231215-en
General
-
Target
2299a0123f067faa3c0c17c687b752a4
-
Size
1.1MB
-
MD5
2299a0123f067faa3c0c17c687b752a4
-
SHA1
a4af9ca4f84f3276c24de8d663b65f557e6e2ce2
-
SHA256
3bf82affd3f149f149b027f9b56dee9da9e7150dd9d63766fc4532e526ec6888
-
SHA512
14c6a88b559c232be3c20147e9bf17e6f478056c1b52d070b12f3c681a9311a069a888596f9fc88bb549b6f88f02822af61db352f596e327c038d00a5252fda9
-
SSDEEP
24576:sYvxYRX+3NDoJcbZaBiXT5dui84U4q14F:DLNDoOkwXT5EibU4M4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2299a0123f067faa3c0c17c687b752a4
Files
-
2299a0123f067faa3c0c17c687b752a4.exe windows:4 windows x86 arch:x86
a6cd2a3bbdc0ebf6b6d01bc55bb6bd34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
Sleep
DeleteFileA
CopyFileA
CopyFileW
ReadFile
GlobalFree
ReadConsoleA
CopyFileExA
GetCommandLineA
CreateProcessA
CreateThread
GetCPInfo
user32
GetWindowTextA
LoadCursorA
CreateIcon
GetMenu
CopyImage
LoadMenuA
InsertMenuA
DialogBoxParamW
DrawIcon
GetDlgItem
GetDC
DialogBoxParamA
CalcMenuBar
AlignRects
IsMenu
DialogBoxParamA
LoadMenuA
CopyImage
GetFocus
DrawIconEx
GetCursor
GetDC
DrawTextA
AppendMenuA
AlignRects
IsWindow
CreateIcon
CloseWindow
CopyRect
InsertMenuA
DrawTextW
LoadCursorA
DialogBoxParamW
GetCursor
GetMenu
EndDialog
DrawIconEx
DrawTextW
DrawTextA
LoadCursorA
GetWindowTextLengthA
CopyImage
AlignRects
IsWindow
GetDlgItem
CopyRect
BlockInput
AlignRects
CopyIcon
GetDC
LoadCursorA
GetMenu
AppendMenuA
InsertMenuA
CloseWindow
DrawTextW
CopyRect
CalcMenuBar
CopyRect
CalcMenuBar
GetDlgItem
IsMenu
BlockInput
IsWindow
CopyIcon
DialogBoxParamW
AppendMenuW
LoadMenuA
GetFocus
GetWindowTextLengthA
DrawTextW
advapi32
RegEnumKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueW
RegLoadKeyA
RegEnumKeyExA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyA
RegReplaceKeyA
RegFlushKey
RegCreateKeyExW
RegCreateKeyW
RegEnumValueA
RegLoadKeyW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rldata Size: 944KB - Virtual size: 941KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ