Static task
static1
Behavioral task
behavioral1
Sample
2b9a3fcf26cb7375a92609305b3d7630.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b9a3fcf26cb7375a92609305b3d7630.exe
Resource
win10v2004-20231222-en
General
-
Target
2b9a3fcf26cb7375a92609305b3d7630
-
Size
188KB
-
MD5
2b9a3fcf26cb7375a92609305b3d7630
-
SHA1
e7d6b59a4681bd77598b4d9def5e98bebd4ac277
-
SHA256
bd96bfb8016f85e26ffbc4611b0124690bd198b0d2ab97faee8db232369539cd
-
SHA512
5a9f0abe20a6f5462400924e3e861ed7fa596a2f585c5b07e4a33d6c961dde46f1ea7612cc6a8723b3b81712cc7d0ba266e28611aa160d7a9741e6db6523dedf
-
SSDEEP
3072:kEXTW2KnKBDa5iim9O+/5v9avMbmvUHVgiHKTwgKJ5aLaj:keW2QOu5i3O09aXaVdHKTY5gaj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9a3fcf26cb7375a92609305b3d7630
Files
-
2b9a3fcf26cb7375a92609305b3d7630.exe windows:4 windows x86 arch:x86
0e53eb6b2772a366812ca1ab5629fd93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidToStringA
shell32
SHGetSpecialFolderPathA
advapi32
RegOpenKeyExA
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
RegSetValueExA
DeleteService
OpenSCManagerA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegCloseKey
shlwapi
StrStrIA
SHEnumValueA
SHSetValueA
SHEnumKeyExA
SHGetValueA
ole32
CoCreateGuid
CoInitialize
CoCreateInstance
user32
wsprintfA
msvcrt
__mb_cur_max
isupper
??2@YAPAXI@Z
tolower
printf
strlen
isalnum
malloc
free
memcmp
time
fwrite
fclose
fopen
strcat
strcpy
isdigit
atoi
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
wctomb
islower
isgraph
ispunct
isspace
isxdigit
strerror
memset
memcpy
isalpha
imagehlp
ImageNtHeader
kernel32
lstrlenA
GetModuleHandleA
GetStartupInfoA
GetFileAttributesExA
SetFileTime
GetSystemDirectoryA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
CreateFileA
CloseHandle
GetLastError
GetFileAttributesA
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE