Static task
static1
Behavioral task
behavioral1
Sample
25402441cfd98d68e73443be84d57a5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25402441cfd98d68e73443be84d57a5a.exe
Resource
win10v2004-20231215-en
General
-
Target
25402441cfd98d68e73443be84d57a5a
-
Size
2.6MB
-
MD5
25402441cfd98d68e73443be84d57a5a
-
SHA1
605bc384e537892407682fb9b1891cd76584f019
-
SHA256
7ddf4791c445b03a8b0ef2ab95d6acea4ab5bbb5091aec9a30156ab924cc4a26
-
SHA512
3ef7cb06221b43553b3f6b181ef80d7473b1f4041e71fab465484936d433998bec6de72977d1462119d9fda57f7f84fd9276d442fc086d7a4cdd94eeef403247
-
SSDEEP
49152:pYxlMZ7qcq5VocMdK0OzfKGAOOJm4Xj3d:qa7qcq5Voc0KFzfKGAOWm4Xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25402441cfd98d68e73443be84d57a5a
Files
-
25402441cfd98d68e73443be84d57a5a.exe windows:4 windows x86 arch:x86
2970ddeacfaff68c00f515ef8e6250d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageRect
ImageList_BeginDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_Destroy
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetDragImage
ImageList_AddIcon
ImageList_Create
ImageList_AddMasked
ImageList_LoadImage
ImageList_Merge
ImageList_LoadImageA
ImageList_DragLeave
InitCommonControls
ImageList_Copy
ImageList_GetIconSize
ImageList_Create
ImageList_BeginDrag
ImageList_Replace
ImageList_AddIcon
ImageList_GetImageRect
ImageList_DragLeave
ImageList_AddMasked
ImageList_LoadImage
ImageList_LoadImageA
ImageList_Remove
ImageList_GetImageInfo
ImageList_Draw
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_DrawEx
advapi32
RegLoadKeyW
RegCreateKeyW
RegEnumKeyExA
RegEnumValueW
RegEnumKeyExW
RegReplaceKeyA
RegFlushKey
RegCreateKeyExA
RegDeleteValueW
RegReplaceKeyW
RegGetKeySecurity
RegEnumValueA
RegQueryInfoKeyW
RegQueryValueA
RegLoadKeyA
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueA
RegQueryInfoKeyA
RegDeleteKeyW
RegLoadKeyA
RegCreateKeyExA
RegReplaceKeyA
RegDeleteKeyA
RegCreateKeyExW
RegQueryValueExA
RegEnumValueA
RegEnumKeyW
RegReplaceKeyW
RegOpenKeyW
RegEnumKeyA
RegFlushKey
RegOpenKeyA
RegEnumKeyExW
RegGetKeySecurity
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExW
RegReplaceKeyW
RegOpenKeyExW
RegCreateKeyExW
RegReplaceKeyA
RegDeleteValueW
RegQueryInfoKeyA
RegQueryValueExW
RegEnumKeyA
RegQueryValueA
RegEnumValueW
RegEnumKeyW
RegEnumValueA
RegLoadKeyW
RegDeleteKeyA
RegReplaceKeyA
RegCreateKeyW
RegQueryValueA
RegEnumKeyA
RegLoadKeyW
RegCreateKeyExW
RegGetKeySecurity
RegLoadKeyA
RegDeleteValueA
RegFlushKey
RegOpenKeyA
RegReplaceKeyW
RegQueryValueExW
RegEnumValueA
RegEnumKeyW
RegOpenKeyExA
RegEnumKeyExW
RegQueryValueW
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExW
user32
CalcMenuBar
GetCursor
GetDC
CopyImage
GetDlgItem
GetWindowTextA
IsWindow
CopyIcon
CloseWindow
DialogBoxParamA
CreateIcon
AlignRects
LoadCursorA
DrawIconEx
GetWindowTextLengthA
IsMenu
BlockInput
DrawTextA
Sections
.text Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 2.3MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ