Static task
static1
Behavioral task
behavioral1
Sample
2a5e645e06a8c6c214a8490bc67d858f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a5e645e06a8c6c214a8490bc67d858f.exe
Resource
win10v2004-20231215-en
General
-
Target
2a5e645e06a8c6c214a8490bc67d858f
-
Size
121KB
-
MD5
2a5e645e06a8c6c214a8490bc67d858f
-
SHA1
c350acc066195dbd1b482098f02a1fef1b8fe7d4
-
SHA256
7af869ba7474d75e82dfdea64bb4038a3b374e3763e6a4d41b1e66a0f6995ed6
-
SHA512
65ccf0345b7896b43c2542a2e7303ae493ac3c07f5ae2fbd8530e6d1fb305af442631700cafff339662a72ea927986a10f2bac6be37fae0274071a9cb864402d
-
SSDEEP
1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlHQ:RxQEDtqrQ5re9BS+blIpNtix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5e645e06a8c6c214a8490bc67d858f
Files
-
2a5e645e06a8c6c214a8490bc67d858f.exe windows:4 windows x86 arch:x86
9dfe3650a0316b3d237fb157b095d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBColorTable
GetDCOrgEx
CreatePalette
SelectPalette
SetTextColor
GetCurrentPositionEx
user32
RegisterClipboardFormatA
GetKeyboardState
GetKeyboardLayout
SetFocus
IsRectEmpty
InflateRect
OffsetRect
RemoveMenu
IsWindowUnicode
AdjustWindowRectEx
CharUpperBuffA
CallWindowProcA
SetTimer
GetMessagePos
BeginPaint
SendMessageW
GetScrollRange
IsDialogMessageW
DrawIcon
SetActiveWindow
DrawMenuBar
SetScrollPos
SetWindowPlacement
RegisterWindowMessageA
GetDCEx
ShowOwnedPopups
CheckMenuItem
OemToCharA
GetScrollInfo
EnumWindows
SetCapture
CreateWindowExA
IntersectRect
GetPropA
GetDC
GetCursor
GetWindowLongA
GetClassLongA
GetMenuItemCount
SetParent
GetMenuItemInfoA
RegisterClassA
InvalidateRect
CharLowerBuffA
GetActiveWindow
PeekMessageA
DestroyIcon
EmptyClipboard
EnumThreadWindows
LoadIconA
DrawEdge
ChildWindowFromPoint
DefFrameProcA
wsprintfA
PeekMessageW
DestroyWindow
SetWindowTextA
GetWindowTextA
IsZoomed
IsDialogMessageA
GetFocus
SetWindowPos
EndPaint
DrawIconEx
FrameRect
MessageBoxA
WaitMessage
PostMessageA
KillTimer
IsChild
GetMenuState
GetForegroundWindow
DispatchMessageA
DefWindowProcA
SetMenuItemInfoA
RemovePropA
GetKeyNameTextA
LoadCursorA
SetClipboardData
ShowWindow
CharLowerA
GetWindowRect
GetKeyboardType
EnableWindow
SetWindowLongW
GetSysColor
DefMDIChildProcA
DestroyCursor
UnhookWindowsHookEx
OpenClipboard
GetKeyboardLayoutList
FillRect
TranslateMessage
GetCapture
InsertMenuA
kernel32
VirtualAllocEx
SetHandleCount
InitializeCriticalSection
lstrcatA
lstrcpynA
lstrlenA
ReadFile
GetLocalTime
GetCurrentThreadId
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
LocalFree
SetEvent
ExitProcess
GetOEMCP
shell32
SHGetFileInfoA
version
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE