Static task
static1
Behavioral task
behavioral1
Sample
2b2aa245b97437cb8874fcf81ca690fd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b2aa245b97437cb8874fcf81ca690fd.exe
Resource
win10v2004-20231215-en
General
-
Target
2b2aa245b97437cb8874fcf81ca690fd
-
Size
321KB
-
MD5
2b2aa245b97437cb8874fcf81ca690fd
-
SHA1
d7d0d0674d0a331ad5a14620f83f6c57e43885fd
-
SHA256
5804f7c6b6f41b15fb29387886d84bd63762fe8c8a2fd50ef34df90ccbd802a5
-
SHA512
bc6568dfb41af76a3fb31329c73bbe3f0ae5e4da6c5ed45da3beea2edb427f41ebf199edb58e52a2c41500ec21356afa259321388b98e33d339fede5a39ac73c
-
SSDEEP
6144:XMfcdBUaLYmzEWTbpJDSRbuFrU8By47sBv:XMfcdBLYgTFCsrU8By478
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2aa245b97437cb8874fcf81ca690fd
Files
-
2b2aa245b97437cb8874fcf81ca690fd.exe windows:4 windows x86 arch:x86
3fbe13330ace6bf643af8feb29b9a1a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackMouseEvent
GetSubMenu
GetClassInfoExA
SetClipboardData
DefFrameProcW
SetParent
DrawFocusRect
SystemParametersInfoA
EndPaint
DrawStateW
BlockInput
ModifyMenuA
RegisterClassA
SetCapture
NotifyWinEvent
LoadStringA
DdeFreeStringHandle
RegisterClassExA
DlgDirSelectComboBoxExW
CreateIcon
SetDlgItemInt
advapi32
RegCreateKeyA
RegEnumValueA
GetUserNameA
RegDeleteKeyA
CryptSetProvParam
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
CryptExportKey
CryptEnumProvidersW
AbortSystemShutdownA
CryptAcquireContextW
kernel32
RtlUnwind
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
GetStartupInfoA
GetModuleFileNameA
VirtualQuery
GetDateFormatA
FreeEnvironmentStringsW
InterlockedDecrement
GetUserDefaultLCID
WriteFile
GetTickCount
SetConsoleCtrlHandler
GetCurrentDirectoryW
InitializeCriticalSection
GetOEMCP
GetProcessHeap
LCMapStringA
SetHandleCount
SetUnhandledExceptionFilter
WaitForDebugEvent
GetTimeZoneInformation
InterlockedIncrement
LoadLibraryA
DuplicateHandle
GetLocaleInfoA
FindNextChangeNotification
HeapSize
HeapFree
HeapAlloc
CloseHandle
VirtualFree
VirtualAlloc
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
FreeLibrary
GetStdHandle
InterlockedExchange
GetConsoleTitleW
SetFilePointer
GetACP
GetUserDefaultLangID
IsDebuggerPresent
GetCPInfo
HeapDestroy
GetModuleFileNameW
FindResourceW
TlsGetValue
GetTimeFormatA
TerminateProcess
GetLocaleInfoW
GetDriveTypeA
ExitProcess
FreeEnvironmentStringsA
FlushFileBuffers
GetVersionExA
WriteConsoleW
GetEnvironmentStringsW
GetModuleHandleA
ReadFileEx
OpenMutexA
GetCurrentThread
WriteConsoleA
SetStdHandle
TlsAlloc
EnumDateFormatsW
GetConsoleTitleA
EnterCriticalSection
Sleep
CompareStringW
SetConsoleActiveScreenBuffer
lstrcpynW
GetStartupInfoW
GetFileType
GetVersion
GetSystemTimeAsFileTime
GetStringTypeA
GetCurrentProcessId
GetLastError
CompareStringA
RtlZeroMemory
GetCurrentProcess
MultiByteToWideChar
GetEnvironmentStrings
TlsSetValue
HeapCreate
HeapReAlloc
ReadFile
GetWindowsDirectoryW
IsValidCodePage
GetConsoleOutputCP
GetConsoleMode
GetCommandLineA
QueryPerformanceCounter
RemoveDirectoryW
DeleteCriticalSection
UnlockFile
GetProcAddress
GetCommandLineW
GetProfileIntA
EnumResourceLanguagesA
SuspendThread
LeaveCriticalSection
GetStringTypeW
SetLastError
CreateFileA
TlsFree
CreateMutexA
SetEnvironmentVariableA
LCMapStringW
wininet
InternetShowSecurityInfoByURLA
InternetCombineUrlA
comctl32
InitCommonControlsEx
shell32
ShellExecuteA
SHGetPathFromIDListA
ExtractAssociatedIconW
SHAppBarMessage
SheGetDirA
gdi32
GetICMProfileW
GetMetaFileBitsEx
CopyMetaFileW
DescribePixelFormat
PolyBezierTo
EnumObjects
SetWindowExtEx
StartPage
RectInRegion
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ