Static task
static1
Behavioral task
behavioral1
Sample
2af82cbb8ee43dcbecbdcd0272943cfe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2af82cbb8ee43dcbecbdcd0272943cfe.exe
Resource
win10v2004-20231222-en
General
-
Target
2af82cbb8ee43dcbecbdcd0272943cfe
-
Size
176KB
-
MD5
2af82cbb8ee43dcbecbdcd0272943cfe
-
SHA1
e72f7d28283f46bffcb788eee36d5f3cbe14bdf3
-
SHA256
19c39338a7897b9ef329e6b8f86289befb474ce47140adc4f73d595a7c062fd6
-
SHA512
f46760ffc306400defbae0bc7c16f1759d731ffb68c16c5c6cfa14b3b5276834d227b64fba9cda10536ec0291f2d0b3d26adaefafaa927611930117767e7a3c9
-
SSDEEP
3072:CDT9DrTg7InZ4iyALf5z2BSn7GWqa4T1ZM6jmO9HNN8cs7R4fiZ3/BjKaQd46M:CDTxYmQALf5z2BS1ih99HNs7GfeKaQdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2af82cbb8ee43dcbecbdcd0272943cfe
Files
-
2af82cbb8ee43dcbecbdcd0272943cfe.exe windows:5 windows x86 arch:x86
eda12c9d6d50c1e0378f1ad437dab8ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
LocalFree
GetCurrentProcessId
LoadLibraryA
LocalAlloc
GetFileAttributesW
GetProcAddress
GetSystemDirectoryW
OpenProcess
LoadLibraryW
GetCurrentProcess
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
IsProcessorFeaturePresent
user32
EndPaint
DestroyWindow
GetMessageA
PostQuitMessage
KillTimer
GetLastActivePopup
LoadIconA
GetClientRect
BeginPaint
GetDC
TranslateMessage
InflateRect
MessageBoxA
InvalidateRect
UnregisterClassA
CreateWindowExA
ReleaseDC
GetDesktopWindow
SetWindowPos
DispatchMessageA
CloseWindow
LoadCursorA
RegisterClassA
gdi32
CreateFontIndirectA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateRectRgnIndirect
Rectangle
FillRgn
CreatePen
TextOutW
GetStockObject
CreateSolidBrush
LineTo
comdlg32
ChooseFontA
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ