Static task
static1
Behavioral task
behavioral1
Sample
2bb611f23c5a62333fbebbfd1143342f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bb611f23c5a62333fbebbfd1143342f.exe
Resource
win10v2004-20231215-en
General
-
Target
2bb611f23c5a62333fbebbfd1143342f
-
Size
190KB
-
MD5
2bb611f23c5a62333fbebbfd1143342f
-
SHA1
27bc05610b0c39c8473bd93de60054d14bb3cb45
-
SHA256
eb056b18d5c4b115e6e75f0cc1cb103f019370019b3d4e7aff7ec993713a3d61
-
SHA512
68b09457446e5f1d18f158712cbed46917aca2a02d6795535b227d462dd562643c14e11d45b470b5c6fd60dd9e34353c1cf3c835037cb561892dd253ef5f0ddd
-
SSDEEP
3072:N7bXXEWNu8GPeLXUVHYI96sWmkVFfCtNUA2XKSkvZAkVXr+1e3USm8:FbnT8QUVXotmKFpFX81VX0A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb611f23c5a62333fbebbfd1143342f
Files
-
2bb611f23c5a62333fbebbfd1143342f.exe windows:4 windows x86 arch:x86
029748ebfe6215827e59e9d3d716eaea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
SetBkMode
RestoreDC
SelectPalette
GetDIBColorTable
BitBlt
shlwapi
PathIsContentTypeA
comctl32
ImageList_DrawEx
ImageList_Write
ImageList_Destroy
ImageList_Remove
user32
DrawIcon
AdjustWindowRectEx
GetKeyboardLayoutNameA
GetCursor
DefWindowProcA
GetPropA
SendMessageA
GetClientRect
EnableScrollBar
PeekMessageA
GetMenu
GetMenuItemID
SendMessageW
FillRect
LoadKeyboardLayoutA
SetScrollRange
SetCursor
CharToOemA
GetMenuItemCount
CharNextA
InsertMenuItemA
GetLastActivePopup
RegisterClipboardFormatA
DrawEdge
ClientToScreen
UpdateWindow
UnhookWindowsHookEx
GetDesktopWindow
PtInRect
SetMenuItemInfoA
IsWindowVisible
CreateMenu
DeleteMenu
CreateWindowExA
DestroyMenu
GetClipboardData
SetCapture
WaitMessage
BeginPaint
GetScrollPos
GetKeyNameTextA
SetWindowPos
GetWindow
IsWindowUnicode
EnumWindows
KillTimer
RedrawWindow
CallNextHookEx
IsIconic
IsWindow
EnumThreadWindows
ActivateKeyboardLayout
SetParent
IsDialogMessageW
GetParent
GetWindowDC
GetIconInfo
DestroyCursor
ChildWindowFromPoint
SetMenu
PostQuitMessage
GetSysColor
ScreenToClient
GetMenuState
InvalidateRect
GetDC
EndPaint
SetClipboardData
DispatchMessageA
DrawMenuBar
EqualRect
GetDlgItem
GetMessagePos
wsprintfA
CharNextW
TranslateMessage
DrawFrameControl
DispatchMessageW
ReleaseCapture
SetWindowTextA
SetScrollPos
GetClassLongA
CreatePopupMenu
GetSystemMetrics
RemovePropA
EnableMenuItem
CheckMenuItem
DefFrameProcA
OffsetRect
UnregisterClassA
WindowFromPoint
GetMenuItemInfoA
GetWindowTextA
SystemParametersInfoA
EnableWindow
GetKeyState
GetScrollRange
CharLowerBuffA
SetTimer
SetActiveWindow
MapWindowPoints
GetWindowRect
GetWindowLongA
GetCapture
FrameRect
SetForegroundWindow
SetPropA
RegisterWindowMessageA
GetKeyboardLayoutList
ShowScrollBar
MoveWindow
SetScrollInfo
RegisterClassA
SetWindowPlacement
GetForegroundWindow
CharLowerA
TranslateMDISysAccel
ReleaseDC
GetSystemMenu
ShowWindow
CloseClipboard
GetWindowPlacement
GetMenuStringA
TrackPopupMenu
MapVirtualKeyA
PeekMessageW
IsRectEmpty
ShowOwnedPopups
IntersectRect
GetClassNameA
GetFocus
MsgWaitForMultipleObjects
GetScrollInfo
OpenClipboard
GetKeyboardState
RemoveMenu
FindWindowA
CharUpperBuffA
IsZoomed
GetTopWindow
GetWindowThreadProcessId
PostMessageA
SetRect
InsertMenuA
DestroyWindow
GetSysColorBrush
EmptyClipboard
SetWindowLongA
DrawTextA
GetActiveWindow
LoadCursorA
GetClassInfoA
OemToCharA
SetWindowsHookExA
GetKeyboardType
CreateIcon
DestroyIcon
DrawIconEx
GetKeyboardLayout
LoadBitmapA
LoadStringA
IsWindowEnabled
GetCursorPos
IsDialogMessageA
GetWindowLongW
MessageBeep
ScrollWindow
LoadIconA
SetWindowLongW
DefMDIChildProcA
SetFocus
EnumChildWindows
MessageBoxA
DrawAnimatedRects
SetClassLongA
GetDCEx
ole32
GetHGlobalFromStream
CoFreeUnusedLibraries
shell32
Shell_NotifyIconA
DragQueryFileA
SHFileOperationA
SHGetFileInfoA
kernel32
lstrcatA
LocalReAlloc
SetThreadLocale
HeapAlloc
ExitThread
FindFirstFileA
GetProcAddress
VirtualAllocEx
ExitProcess
LoadLibraryA
lstrcpyA
WaitForSingleObject
SetHandleCount
GetModuleHandleA
GetACP
MulDiv
GlobalAlloc
DeleteFileA
lstrcpynA
version
GetFileVersionInfoSizeA
Sections
CODE Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ