Static task
static1
Behavioral task
behavioral1
Sample
2608e0e686946269ca1666b09f430038.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2608e0e686946269ca1666b09f430038.exe
Resource
win10v2004-20231215-en
General
-
Target
2608e0e686946269ca1666b09f430038
-
Size
110KB
-
MD5
2608e0e686946269ca1666b09f430038
-
SHA1
80cacf6b245682fb1586d4d51c9d99e9b628bda7
-
SHA256
5a5e406ef1c9f60521c01bac2fda8eceb7c9edfdbf9b1821b1407795f891aebc
-
SHA512
1f3ba4d2e2b4581b8f21d9efbdb70bcc75473e2a63d1a555d600db4b1a5aba46b94965e90da928ba4ad2bc7a945063ba2646c504a132d84711505465cca4dd0a
-
SSDEEP
1536:RGFKGs1eHUF+S47YvO4K7vADHO9WbYjx+nvk678trtOUm66GU5SMT5:AZuAMT4cvRAuvNExCSMT5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2608e0e686946269ca1666b09f430038
Files
-
2608e0e686946269ca1666b09f430038.exe windows:5 windows x86 arch:x86
69105911e8f18eec511ca288bf8bfc06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomA
CopyFileA
lstrcmpA
lstrcmpiW
QueryPerformanceCounter
lstrlenW
GetWindowsDirectoryA
RemoveDirectoryW
FindClose
DeleteFileA
GetCommandLineA
GetModuleHandleA
lstrcmpiA
lstrlenA
RemoveDirectoryA
VirtualAlloc
GetSystemTime
VirtualFree
gdi32
SetStretchBltMode
SaveDC
CreateFontIndirectA
LineTo
DeleteObject
SetTextColor
CreateCompatibleDC
SelectObject
CreatePalette
SelectPalette
GetDeviceCaps
GetClipBox
DeleteDC
RectVisible
GetObjectA
SetTextAlign
SetMapMode
GetStockObject
CreateSolidBrush
GetPixel
GetTextMetricsA
user32
GetParent
GetDesktopWindow
TranslateMessage
CharNextA
GetDC
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ