Static task
static1
Behavioral task
behavioral1
Sample
263b0abc314aaeb2f0aaec4c519b4e90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
263b0abc314aaeb2f0aaec4c519b4e90.exe
Resource
win10v2004-20231222-en
General
-
Target
263b0abc314aaeb2f0aaec4c519b4e90
-
Size
178KB
-
MD5
263b0abc314aaeb2f0aaec4c519b4e90
-
SHA1
589d4ab4f0d1bef2131ec6e20e0a54aced0c404e
-
SHA256
03a20faa1eb7b2316db736bb6e7b3c5a0c4179f0c2c47df8b0ca77c8c0428d57
-
SHA512
8e0c0e4ccfb93f5f45a26db1966fb1d3eca646d2a381482b4552a8094355c2e924dce3c583d465540ffdbcbdb7a881f71f735db84090121f7a5ce0f7e23b13a7
-
SSDEEP
3072:l38a8VLdT+rZhNMwy/bi/gsx9TBAUpblm2iB+ZWJPfiW:10R4h+lEtAURQ0YJyW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 263b0abc314aaeb2f0aaec4c519b4e90
Files
-
263b0abc314aaeb2f0aaec4c519b4e90.exe windows:5 windows x86 arch:x86
f1fac7b15279da2203eb27d5a3c0e660
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EndDoc
WidenPath
GetROP2
CreateFontIndirectA
CreateFontIndirectW
ExtFloodFill
kernel32
GetTickCount
FoldStringW
GetBinaryTypeW
LocalSize
CreateDirectoryA
GetModuleFileNameW
user32
ArrangeIconicWindows
CreateDialogParamW
DlgDirSelectComboBoxExA
SetMenuItemInfoW
SetScrollInfo
GetWindowRect
CharNextW
SendMessageTimeoutW
SetDlgItemTextW
LoadCursorW
GetNextDlgGroupItem
IsCharAlphaA
IsCharAlphaW
atl
AtlAxCreateControl
AtlAxCreateControlEx
shlwapi
PathFileExistsW
Sections
.dedrde Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vggh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqew Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ereffv Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgdfs Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ