Static task
static1
Behavioral task
behavioral1
Sample
280aaa4333b3220bae2a912537252ea3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
280aaa4333b3220bae2a912537252ea3.exe
Resource
win10v2004-20231215-en
General
-
Target
280aaa4333b3220bae2a912537252ea3
-
Size
58KB
-
MD5
280aaa4333b3220bae2a912537252ea3
-
SHA1
6c0b2cf62e4d079e571055d31a7ab99196001992
-
SHA256
77ea75439dad2044e9e02bb922781b4e67454d5a0845dcc72ed0a429737bc008
-
SHA512
f93b7a58a845b0bf7d853d30aa53720d20b5ecbd12d0abba3425fc0fef77d76cb3ce520e17ba8e0578b7299d802977bc398387e97a64d608b643291ab528b6d6
-
SSDEEP
768:nysq0ruBYv5biqZEB/DSXQ5Iu43MFkQjPPc7tZ1rzhZrVQX9N5VWb3fFXk0WVuKb:n06huOq/DS2XkqP+H5H+XvKfJk0WVuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 280aaa4333b3220bae2a912537252ea3
Files
-
280aaa4333b3220bae2a912537252ea3.exe windows:4 windows x86 arch:x86
233d43c85d3e6d8c909589d1c7274413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursor
LoadImageA
GetMessageA
DrawTextA
kernel32
SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep
ole32
CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
code Size: 17KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE