25@24
Static task
static1
Behavioral task
behavioral1
Sample
269c7e5ce62e917d997ae319c9658100.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
269c7e5ce62e917d997ae319c9658100.exe
Resource
win10v2004-20231215-en
General
-
Target
269c7e5ce62e917d997ae319c9658100
-
Size
190KB
-
MD5
269c7e5ce62e917d997ae319c9658100
-
SHA1
a490033afa0cbdb3e34e87b6037a6510d1ba985b
-
SHA256
4e5647e27bce5906e8678ccaeb120078f86cef98f9c1a183437de4c9cb1ed67d
-
SHA512
c280256b2f91812d41d8f171d3c5e8c471c9fb29597a7efe29ad1ff9f7ec220f06a6a4f82ee79dcc763e6040af52911b266ac561963d20569883afee5f4472ff
-
SSDEEP
3072:11TtrovjvrWz15hXmyaTByMGFH7ylmx4plURt0jo8R7u:11hobConTi9ylRURl8Rq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 269c7e5ce62e917d997ae319c9658100
Files
-
269c7e5ce62e917d997ae319c9658100.exe windows:4 windows x86 arch:x86
105b34fce53e86fc6ac6b3c46d3dfb87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
IsWindowVisible
wsprintfA
GetClassInfoA
GetClassNameA
GetWindow
GetClassLongA
gdi32
SelectPalette
GetPaletteEntries
GetTextColor
GetTextAlign
BitBlt
SaveDC
version
VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shell32
SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetDiskFreeSpaceA
comdlg32
FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
kernel32
lstrcmpA
MoveFileExA
VirtualAlloc
lstrcatA
VirtualAllocEx
LocalAlloc
HeapDestroy
ole32
CoFreeUnusedLibraries
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CoRevokeClassObject
CoRegisterClassObject
CoGetContextToken
OleCreateStaticFromData
CoDisconnectObject
OleRun
CLSIDFromString
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tls Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: 512B - Virtual size: 378B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ