Static task
static1
Behavioral task
behavioral1
Sample
2296c25ed6f76c2cd40662ad33885678.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2296c25ed6f76c2cd40662ad33885678.exe
Resource
win10v2004-20231215-en
General
-
Target
2296c25ed6f76c2cd40662ad33885678
-
Size
64KB
-
MD5
2296c25ed6f76c2cd40662ad33885678
-
SHA1
e64b342fefd138605184786b4bff14bffb971965
-
SHA256
4f0f393429b87ebf3924030dae26b9a0fa06ac959d148373eacef8c305e0a99e
-
SHA512
e579c9bb983b4407592c4ad17f5c312bdb0569eec5c5ecc2394163dead585b8b7b28f91978e396067ff965efe90572628e4ac33b1f30133fb9b869acf144264b
-
SSDEEP
768:x8TEb/TZxc4g650pPCFqKjrQDCtoI9rScguYEwyzymm7Dw/wBdSWY2k+PoEW87Gp:iTEjYZCVBS3HEwyzy7hdSW4TJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2296c25ed6f76c2cd40662ad33885678
Files
-
2296c25ed6f76c2cd40662ad33885678.exe windows:4 windows x86 arch:x86
4532b657f8c21d280981372a87e79c31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
SetFilePointer
FindFirstFileW
MultiByteToWideChar
ResetEvent
SuspendThread
GetCurrentThreadId
SetCurrentDirectoryW
GetProcAddress
lstrcpyW
FindResourceExW
CreateThread
FindNextChangeNotification
GetFileSize
CreateProcessW
MoveFileW
LoadResource
LoadLibraryA
GetCurrentProcess
ReadFile
user32
SetWindowPos
SetForegroundWindow
EndDialog
GetCursorPos
VkKeyScanW
GetMessageW
InvalidateRect
TranslateMessage
SendMessageW
GetDlgItem
PostMessageW
SetDlgItemTextW
GetWindowThreadProcessId
SystemParametersInfoW
FillRect
GetKeyState
gdi32
GetObjectW
CreateSolidBrush
SelectObject
SetMapMode
Rectangle
SetBkColor
LineTo
SetDIBits
CreateICW
GetMapMode
StretchBlt
GetClipBox
advapi32
RegOpenKeyExW
RegCreateKeyExW
LookupAccountSidW
RegCloseKey
RegQueryValueExW
StartServiceW
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE