Static task
static1
Behavioral task
behavioral1
Sample
2bfdf99fd15de2b9ca3b5d9986b3940e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2bfdf99fd15de2b9ca3b5d9986b3940e.exe
Resource
win10v2004-20231215-en
General
-
Target
2bfdf99fd15de2b9ca3b5d9986b3940e
-
Size
372KB
-
MD5
2bfdf99fd15de2b9ca3b5d9986b3940e
-
SHA1
da43fb36475a806b0c1303d4854074dc62ed7e08
-
SHA256
ca88a53e83a9e37f5adf6c0916aba6bba7ed0e785d64c3db7c587b34789cab75
-
SHA512
ad2937544838bbcf3177383638327ee7115d5d801c5b340c5d0f1815e4a8abe823d5e5ecc23d80882fba160e153aab45dc402d307eb7656136f2fd2787e6b220
-
SSDEEP
6144:6oRBN7rCXDteZ12GzEXIBGKjxqbfygVpGDjwj4vZKxW7qmpEXuIIc/SpzWJgpJDo:6ovN7rCX5s12J4Y1Dj4vZ4PpEcap6Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bfdf99fd15de2b9ca3b5d9986b3940e
Files
-
2bfdf99fd15de2b9ca3b5d9986b3940e.exe windows:4 windows x86 arch:x86
9339dc02287ba337c266d6b1cfbc09f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDesktopWindow
GetWindowLongW
IsDialogMessageA
SetWindowTextA
SetWindowPos
GetSysColor
ScrollWindow
GetSysColorBrush
IsDialogMessageW
EndPaint
ScreenToClient
SetWindowPlacement
GetMessagePos
CallWindowProcA
LoadBitmapA
GetCursorPos
IsWindowUnicode
GetMenuItemCount
DefFrameProcA
LoadCursorA
IsWindow
GetParent
CreateWindowExA
CharNextW
CharToOemA
GetScrollPos
GetKeyboardLayout
EnumWindows
ShowScrollBar
GetDlgItem
DrawTextA
SystemParametersInfoA
SetTimer
GetDC
LoadKeyboardLayoutA
GetClassNameA
OpenClipboard
GetWindow
RegisterWindowMessageA
RedrawWindow
SetWindowsHookExA
CharNextA
DrawEdge
GetClassInfoA
ShowOwnedPopups
GetActiveWindow
SetScrollRange
DrawIcon
GetWindowDC
GetKeyboardType
LoadStringA
LoadIconA
GetLastActivePopup
SetCapture
AdjustWindowRectEx
GetClientRect
SetScrollInfo
GetCursor
TranslateMDISysAccel
TranslateMessage
MoveWindow
SetForegroundWindow
SetWindowLongA
InsertMenuItemA
ShowWindow
GetKeyboardLayoutList
MessageBeep
GetDCEx
EnumThreadWindows
FindWindowA
SetMenu
OemToCharA
InvalidateRect
EnumChildWindows
EnableMenuItem
GetWindowTextA
IntersectRect
SetActiveWindow
GetWindowPlacement
UnhookWindowsHookEx
DestroyWindow
CloseClipboard
CreateIcon
version
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
ExitThread
IsBadReadPtr
GetCommandLineA
GetVersionExA
GetLastError
LoadLibraryExA
GetOEMCP
GetProcAddress
VirtualAlloc
GlobalAlloc
LoadLibraryA
GetCommandLineW
VirtualAllocEx
GetModuleHandleA
comctl32
ImageList_Remove
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ