Static task
static1
Behavioral task
behavioral1
Sample
2cf863f20025e6595a5a9469b508c73d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cf863f20025e6595a5a9469b508c73d.exe
Resource
win10v2004-20231215-en
General
-
Target
2cf863f20025e6595a5a9469b508c73d
-
Size
39KB
-
MD5
2cf863f20025e6595a5a9469b508c73d
-
SHA1
78a8d800eaec97db4fe040a3b096af960941e1da
-
SHA256
4dfc4c0924cfc620184cdfc7c9384f5a952097085145c653ac1056f74c8eca0a
-
SHA512
8c28ec8cabf63f2941212284218de01b43852df9c3bd09ed17cc9e835d4ddd99330d043ec03e68c330f93eeaa108d1b993be0c51bb7626dfb64b1c863f02c686
-
SSDEEP
768:7wWFWX3HW3eVKppOmfBfsEM6gme7fpxKjAIeJQBrxSzNJhSFj8xR14aLEj:fWXXXViDBtM6wxKsIHrxwhyj8xRqaL+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf863f20025e6595a5a9469b508c73d
Files
-
2cf863f20025e6595a5a9469b508c73d.exe windows:4 windows x86 arch:x86
1334c71b6fff106e5755bfd8746587d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CreateMailslotW
EnumResourceNamesA
ExitProcess
GetCommProperties
GetCurrentDirectoryW
GetFileType
GetPrivateProfileIntA
GetStringTypeExW
GetSystemDefaultLCID
GetTempPathW
GetThreadLocale
GlobalAddAtomA
IsDBCSLeadByteEx
PrepareTape
SetEnvironmentVariableW
SetProcessPriorityBoost
Thread32First
Thread32Next
TryEnterCriticalSection
WriteConsoleW
WritePrivateProfileSectionW
lstrlen
user32
CharUpperBuffW
CloseWindowStation
DdeReconnect
DefFrameProcW
DeferWindowPos
DispatchMessageA
GetCaretBlinkTime
GetDlgItemTextA
GetMessageExtraInfo
GetProcessWindowStation
GetSystemMenu
GrayStringA
IsDialogMessage
IsRectEmpty
LoadAcceleratorsW
LoadIconA
LoadStringW
LookupIconIdFromDirectory
MessageBoxIndirectW
OpenIcon
OpenInputDesktop
PtInRect
SendIMEMessageExA
SetCaretPos
SetFocus
SetMenuInfo
SetPropA
TileWindows
gdi32
AddFontResourceA
CloseMetaFile
CopyEnhMetaFileW
CreateCompatibleBitmap
CreateMetaFileA
EnumEnhMetaFile
Escape
ExtCreatePen
GdiPlayJournal
GetBitmapBits
GetBrushOrgEx
GetCharWidthA
GetCharWidthW
GetDeviceCaps
GetKerningPairs
PlayEnhMetaFile
RectVisible
RemoveFontResourceW
ResetDCW
SelectObject
SetDIBColorTable
SetDeviceGammaRamp
SetEnhMetaFileBits
SetSystemPaletteUse
SetWinMetaFileBits
Sections
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE