Static task
static1
Behavioral task
behavioral1
Sample
2c3d9c2b847fb7028a52c51cfd04f0e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c3d9c2b847fb7028a52c51cfd04f0e0.exe
Resource
win10v2004-20231215-en
General
-
Target
2c3d9c2b847fb7028a52c51cfd04f0e0
-
Size
198KB
-
MD5
2c3d9c2b847fb7028a52c51cfd04f0e0
-
SHA1
ee9248bbc0f449a1b6257675b89185ce1540d167
-
SHA256
c6ec2bdb9f07594615d70090c3fbb2a6f1353c5ffa15bc2a4121b8a4083f3a93
-
SHA512
b9c22b00325133c84e61aed0326a5b71489cd7048d985961844f86ef019d820f38591a3ebd3966e75a059726f807f9f3e3f4dbe15aa0031bef0b1651131c58dd
-
SSDEEP
3072:oz0DwsG82whGsphTXpQf3/S6ZF9uamRHP0l20Du9si/B5VASm9:4yhG82wRZQ3FoamRHP0lyzV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c3d9c2b847fb7028a52c51cfd04f0e0
Files
-
2c3d9c2b847fb7028a52c51cfd04f0e0.exe windows:4 windows x86 arch:x86
9ba62f43eb36139dd80a560e2906498f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MsgWaitForMultipleObjects
DrawIcon
GetWindowLongA
GetKeyState
CreateWindowExA
GetCursor
DrawTextA
GetActiveWindow
PtInRect
SetTimer
kernel32
lstrcmpA
LoadLibraryExA
CloseHandle
GetStringTypeW
LocalReAlloc
GetOEMCP
VirtualAlloc
LoadResource
GetModuleHandleA
VirtualQuery
LoadLibraryA
lstrlenA
WaitForSingleObject
DeleteFileA
GetFileSize
ExitThread
WriteFile
GetACP
GetUserDefaultLCID
FindFirstFileA
SetThreadLocale
Sleep
GetCurrentThread
GetProcAddress
LocalAlloc
ExitProcess
Sections
CODE Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
._data Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ