Static task
static1
Behavioral task
behavioral1
Sample
2aa25d76d4604d891a8c4d5799b84446.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2aa25d76d4604d891a8c4d5799b84446.exe
Resource
win10v2004-20231222-en
General
-
Target
2aa25d76d4604d891a8c4d5799b84446
-
Size
3.4MB
-
MD5
2aa25d76d4604d891a8c4d5799b84446
-
SHA1
44b7df19e65312a55abc100b54120775fe6b7bf8
-
SHA256
811b80e41e250a920b60d090faaeb5449822724d4fe1e8be7f18e7d901c03a2a
-
SHA512
e93f475399e165a75f720826c885f6a0a5de9f0b8906b3fa0a15cf50401613ea59a56e79eddcbd14f51aa9945165b02aa267ff6f0eed6aee87fab74485cd2af8
-
SSDEEP
49152:I/DCJUwv/x1T6EMjmL4DoqXH6kJ+inVBqW+4TKtoX1Ai4IZrkdtfU9:oSUwvP6/jDDoqXH60+iek71W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aa25d76d4604d891a8c4d5799b84446
Files
-
2aa25d76d4604d891a8c4d5799b84446.exe windows:4 windows x86 arch:x86
7e4189a0beabfc25292d235fd708480b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
HeapFree
HeapAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetProcessHeap
ExitProcess
GetStdHandle
FindClose
ReadFile
RaiseException
TlsGetValue
InitializeCriticalSection
HeapReAlloc
TlsSetValue
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
SetFilePointer
GetStringTypeW
RtlUnwind
LCMapStringW
InitializeCriticalSectionAndSpinCount
FindNextFileW
FindFirstFileW
DeleteFileW
GetConsoleCP
LocalAlloc
GetCommandLineA
DecodePointer
ResetEvent
ReleaseMutex
EncodePointer
VirtualFree
lstrlenW
GetModuleHandleExW
GetLocaleInfoW
CreateDirectoryW
GetFullPathNameW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
user32
ReleaseDC
DefWindowProcW
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetMessageW
GetDlgItem
GetSystemMetrics
GetWindowRect
GetClientRect
EnableWindow
EndDialog
SetWindowTextW
SetTimer
LoadIconW
PeekMessageW
BeginPaint
ScreenToClient
KillTimer
RegisterClassW
GetWindowTextW
UpdateWindow
SystemParametersInfoW
GetKeyState
ClientToScreen
Sections
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ