Static task
static1
Behavioral task
behavioral1
Sample
2684a412f44b6f40ee64f9750fa6ec3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2684a412f44b6f40ee64f9750fa6ec3a.exe
Resource
win10v2004-20231215-en
General
-
Target
2684a412f44b6f40ee64f9750fa6ec3a
-
Size
201KB
-
MD5
2684a412f44b6f40ee64f9750fa6ec3a
-
SHA1
aaa63786caecd90e94e44bf345530228005396c9
-
SHA256
463930858b63bce58d08503a66fc3941d7233b47d4ac6fe301edb73986d3c95b
-
SHA512
ad4dba6963ac37f7bb151a156bdfabebda887235479d61f55a947a6aff173b861cd09810b49521489b04d3820fa813e829623e165c592c623d4e1fa572a01e2c
-
SSDEEP
6144:gDVhFlOHs3aEEv6txTVCy9gSOrZmIPZT:gDnFAxMFVC2oZp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2684a412f44b6f40ee64f9750fa6ec3a
Files
-
2684a412f44b6f40ee64f9750fa6ec3a.exe windows:5 windows x86 arch:x86
03b7f2c8aa0b427656097fc617d34288
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
kernel32
GetLocalTime
TerminateProcess
GetModuleFileNameA
RtlUnwind
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
RaiseException
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLastError
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFilePointer
HeapReAlloc
SetStdHandle
FlushFileBuffers
HeapFree
GetVersion
GetCurrentProcess
GetPriorityClass
SetPriorityClass
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateFileA
ReadFile
CloseHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
GetWindowsDirectoryA
lstrcmpiA
lstrcpyA
SearchPathA
LocalAlloc
LocalFree
FindResourceA
LoadResource
LockResource
FreeResource
lstrlenA
GetCommandLineA
GetStartupInfoA
ExitProcess
GetTickCount
Sleep
LoadLibraryA
FreeLibrary
CreateFileW
GetProcAddress
GetVersionExA
GetModuleHandleA
WriteFile
UnhandledExceptionFilter
gdi32
SelectPalette
BitBlt
GetSystemPaletteUse
CreatePalette
GetSystemPaletteEntries
CreateCompatibleBitmap
GetDIBits
GetCurrentObject
GetObjectA
GetPaletteEntries
SetDIBColorTable
GetObjectType
SwapBuffers
DescribePixelFormat
StretchBlt
CreateCompatibleDC
CreateDIBSection
SelectObject
SetDIBits
GdiFlush
DeleteDC
DeleteObject
UnrealizeObject
RealizePalette
SetSystemPaletteUse
GetStockObject
GetDeviceCaps
ChoosePixelFormat
SetPixelFormat
user32
GetForegroundWindow
GetSysColor
SetSysColors
FillRect
SetWindowPos
GetUpdateRect
CreateWindowExA
ShowWindow
ReleaseDC
GetDC
GetFocus
BeginPaint
EndPaint
KillTimer
SetTimer
DestroyWindow
LoadIconA
RegisterClassA
LoadCursorA
GetClientRect
FindWindowA
SetForegroundWindow
DialogBoxParamA
GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
ChangeDisplaySettingsA
wsprintfA
MessageBoxA
CharNextA
PeekMessageA
PostQuitMessage
GetParent
SetCursor
GetCursorPos
PostMessageA
SendMessageA
DefWindowProcA
SystemParametersInfoA
IsWindow
CheckDlgButton
GetDlgItem
EnableWindow
IsDlgButtonChecked
LoadStringA
EndDialog
SendDlgItemMessageA
opengl32
glLoadIdentity
glLightModeli
glLightModelfv
glFinish
glViewport
glScissor
wglCreateContext
wglMakeCurrent
wglDeleteContext
glGetString
wglGetProcAddress
glDeleteTextures
glGenTextures
glBindTexture
glTexImage2D
glGetIntegerv
glNewList
glEndList
glTexCoord2f
glPixelStorei
glTexParameteri
glTexEnvi
glFrontFace
glBegin
glNormal3fv
glVertex3fv
glDrawArrays
glEnd
glInterleavedArrays
glMaterialf
glFrustum
glPushMatrix
glRotatef
glPopMatrix
glScalef
glCallList
glOrtho
glTranslatef
glDisable
glClear
glMaterialfv
glLightfv
glEnable
glClearColor
glMatrixMode
glShadeModel
glu32
gluScaleImage
comdlg32
GetOpenFileNameA
comctl32
ord17
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE