Static task
static1
Behavioral task
behavioral1
Sample
22b94df268a1c7149027b43243b091ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22b94df268a1c7149027b43243b091ae.exe
Resource
win10v2004-20231215-en
General
-
Target
22b94df268a1c7149027b43243b091ae
-
Size
636KB
-
MD5
22b94df268a1c7149027b43243b091ae
-
SHA1
c8deb29121107757dac47b1786cee811310b62b7
-
SHA256
e031d6bc6eac24541e099d1bbf89249303ce96640692f218031ec442cbe11a62
-
SHA512
042152178f638ef93f9fda50e1e2a93ee966e45964f359082230dad2e3782d00468e4890880b843823c6523b77fe4f7556871b9d63a0954ca006b8e4669b8876
-
SSDEEP
12288:EwQBI2ox0auZK248B7xIGJ3bGNacM+oz8JGuS4wLSlFd:EwAh60aiIM7x5xbMLom44wmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22b94df268a1c7149027b43243b091ae
Files
-
22b94df268a1c7149027b43243b091ae.exe windows:4 windows x86 arch:x86
a731c71deb35e1ca3b1fac9005bb3a95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetConsoleCP
GetAtomNameA
OpenMutexA
WaitForSingleObject
InterlockedExchange
GetVersion
GlobalUnlock
GetStdHandle
GetCommandLineA
CompareFileTime
SuspendThread
CloseHandle
lstrlenA
HeapReAlloc
GetTickCount
GetSystemDefaultLangID
GetConsoleCP
HeapCreate
WaitForMultipleObjects
VirtualProtect
user32
DispatchMessageA
SetScrollInfo
IsDialogMessage
SetWindowPos
GetDlgItem
SetPropA
CopyImage
DragObject
GetKeyState
MessageBoxA
InsertMenuA
EnableScrollBar
DrawCaption
FindWindowA
CreateIcon
GetKeyboardLayout
DispatchMessageA
GetCursorInfo
DestroyMenu
InvertRect
DialogBoxParamA
CreateMenu
CreateCursor
advapi32
RegEnumKeyA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
RegQueryInfoKeyA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ