Static task
static1
Behavioral task
behavioral1
Sample
2ad4de61b33c8be74e2d9b5b9f8647a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ad4de61b33c8be74e2d9b5b9f8647a5.exe
Resource
win10v2004-20231215-en
General
-
Target
2ad4de61b33c8be74e2d9b5b9f8647a5
-
Size
33KB
-
MD5
2ad4de61b33c8be74e2d9b5b9f8647a5
-
SHA1
1ec5bf11490cfef5d9331b322e3a9da62e107ca8
-
SHA256
5e7eeca76950037a54f59a8768bf31ad3b453c31991926c75a6df57eca2b9624
-
SHA512
5f6ac4cfbf41d882bdd088a0262ab212607593693f879b59a1da377f9b7de484409bc990d2b727a27cc465b6f46d946c397e274d2106a8a76e96ca6c13bdb0c3
-
SSDEEP
384:eD1hVPYDxtiH6bzdyFDyAPgjm1OANAE0qeCQKISu3Q6JkR/Yk0YR+xon7:aaxtiabBy7Pgycc301PSu3QhRFcm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ad4de61b33c8be74e2d9b5b9f8647a5
Files
-
2ad4de61b33c8be74e2d9b5b9f8647a5.exe windows:4 windows x86 arch:x86
5df37e3797a684d2c43943631f698b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
GetDlgItem
DrawIcon
CopyImage
GetCursor
GetWindowTextLengthA
DrawTextW
DialogBoxParamW
LoadMenuA
GetMenu
CreateIcon
GetDC
DialogBoxParamA
CopyRect
DrawIconEx
CopyIcon
CloseWindow
IsWindow
EndDialog
DrawTextA
GetWindowTextA
kernel32
GetFileType
GetCurrentProcess
SetHandleCount
lstrcatA
GetACP
lstrcpyA
LCMapStringW
LCMapStringA
GetModuleFileNameA
GetStartupInfoA
WriteFile
GetOEMCP
GetStringTypeA
MultiByteToWideChar
lstrcpynA
lstrcpynW
GetCommandLineA
GetVersion
TerminateProcess
GetStdHandle
CreateFileA
SetFilePointer
comctl32
ImageList_Copy
ImageList_DragEnter
InitCommonControls
CreateToolbarEx
ImageList_AddIcon
ImageList_Draw
ImageList_Create
ImageList_DrawEx
DllGetVersion
CreateMappedBitmap
CreateStatusWindowW
CreateStatusWindow
DrawStatusTextW
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ