Static task
static1
Behavioral task
behavioral1
Sample
24489cc8b3e8eb2e31ea68b13c62d21e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24489cc8b3e8eb2e31ea68b13c62d21e.exe
Resource
win10v2004-20231215-en
General
-
Target
24489cc8b3e8eb2e31ea68b13c62d21e
-
Size
356KB
-
MD5
24489cc8b3e8eb2e31ea68b13c62d21e
-
SHA1
6f5c6b1a87ac86d2aaf421b23e2582d3c57306d7
-
SHA256
6b71e0eea0b7ad7ef9c8206590ecb61cfb38f27563f440090bae95c1b650f64e
-
SHA512
844f925796eb32eb5502528d1ea7444a51d65cd0e8ba552021ebc3cf42c3bd91650064a7b8974d9849539fbf2e461dcdc171757b673c638cd0e42fcaddc6bdc1
-
SSDEEP
6144:u1qqsjL9bA04jULmUygax5ZfSmJQZFqD+aVHovFQ3XAin1wYBAH7NxJrkjnK:uEtNV4jUyJ5qnqD+LeXVn13mHJrrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24489cc8b3e8eb2e31ea68b13c62d21e
Files
-
24489cc8b3e8eb2e31ea68b13c62d21e.exe windows:4 windows x86 arch:x86
08ee05106b0f0c6e0ff0c545e94a3e5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptHashData
LogonUserW
CryptSignHashW
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumKeyExW
comctl32
CreatePropertySheetPageA
InitCommonControlsEx
CreateToolbarEx
ImageList_Read
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_SetFilter
ImageList_Destroy
ImageList_DrawEx
CreateStatusWindowA
ImageList_DragShowNolock
ImageList_Write
user32
GetMenuStringA
CreateWindowExW
GetCaretBlinkTime
DefWindowProcW
CreateAcceleratorTableW
FindWindowExA
BringWindowToTop
DdeInitializeW
DrawMenuBar
IsIconic
DdePostAdvise
DdeCmpStringHandles
GetWindowLongW
RegisterClassExA
GetMenuBarInfo
DdeQueryStringW
MapVirtualKeyExA
MonitorFromPoint
SetMenu
DdeInitializeA
ImpersonateDdeClientWindow
OpenDesktopA
IsCharUpperA
DestroyWindow
EmptyClipboard
UnhookWindowsHook
CreateDialogIndirectParamA
IsCharAlphaW
GetClipboardOwner
SetShellWindow
MessageBoxA
InSendMessage
ScrollWindow
SetWindowsHookA
PostThreadMessageW
LoadAcceleratorsW
DrawAnimatedRects
EnumDesktopsW
SendInput
EnumDesktopsA
DdeGetData
MapDialogRect
SetDlgItemTextW
GetWindowPlacement
DdeReconnect
DrawEdge
PostMessageA
ShowWindow
CreateIconFromResourceEx
RegisterClassA
IsChild
CreateWindowStationA
GetMenuDefaultItem
WinHelpW
GetMenuItemInfoA
ScreenToClient
DrawTextExA
MessageBoxIndirectA
GetKBCodePage
GetKeyboardLayout
SetMenuItemInfoA
GetCursorInfo
wininet
FtpGetFileA
FindFirstUrlCacheGroup
InternetConnectW
IsUrlCacheEntryExpiredA
InternetTimeFromSystemTime
HttpQueryInfoA
kernel32
TlsFree
GetStdHandle
GetCurrentThread
GetOEMCP
VirtualQuery
SetFilePointer
GetConsoleOutputCP
Sleep
GetProfileStringA
WideCharToMultiByte
GetTimeFormatA
InterlockedExchangeAdd
ReadFile
OpenFileMappingW
GetModuleHandleA
TerminateProcess
IsValidCodePage
GetLongPathNameA
lstrlen
MultiByteToWideChar
WriteFile
GetTickCount
GetTimeFormatW
FlushFileBuffers
CreateDirectoryExA
GetCPInfo
GetCurrentProcessId
QueryPerformanceCounter
SetConsoleCtrlHandler
GetACP
TlsAlloc
FreeLibrary
GetCurrentThreadId
InterlockedExchange
HeapReAlloc
GetModuleFileNameA
LeaveCriticalSection
InterlockedIncrement
UnhandledExceptionFilter
HeapAlloc
WriteConsoleW
GetDiskFreeSpaceExA
HeapFree
GetVersionExA
GetCurrentProcess
DeleteCriticalSection
IsValidLocale
FindAtomW
GlobalFindAtomA
GetSystemTimeAsFileTime
LCMapStringA
GetStartupInfoA
HeapSize
GetLocaleInfoW
GetEnvironmentStringsW
LoadLibraryA
CreateFileMappingA
SetEvent
GetDateFormatA
WriteConsoleA
FreeEnvironmentStringsW
SetHandleCount
GetLocaleInfoA
CloseHandle
GetConsoleCP
GetComputerNameW
GetProcAddress
GetUserDefaultLCID
SetStdHandle
TlsSetValue
ExitProcess
CreateFileA
GetLastError
EnumSystemCodePagesW
GetTimeZoneInformation
LCMapStringW
GetCommandLineA
GetStringTypeA
CompareStringW
InitializeCriticalSection
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
RtlUnwind
VirtualAlloc
EnumSystemLocalesA
lstrcpynA
LocalFlags
EnumDateFormatsW
TlsGetValue
GetStringTypeW
CompareStringA
HeapDestroy
InterlockedDecrement
GetConsoleMode
OpenMutexA
SetEnvironmentVariableA
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
SetLastError
EnterCriticalSection
CreateMutexA
IsDebuggerPresent
GetProcessHeap
gdi32
GetMetaRgn
TextOutA
CreateFontIndirectW
GetKerningPairsW
GetPixel
CreateScalableFontResourceA
GetBitmapDimensionEx
ScaleViewportExtEx
GetBoundsRect
Chord
GetTextAlign
SetPixelFormat
SetAbortProc
comdlg32
GetFileTitleW
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ