Static task
static1
Behavioral task
behavioral1
Sample
2c422222429dcbf8dc9ec72a488531e9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c422222429dcbf8dc9ec72a488531e9.exe
Resource
win10v2004-20231215-en
General
-
Target
2c422222429dcbf8dc9ec72a488531e9
-
Size
772KB
-
MD5
2c422222429dcbf8dc9ec72a488531e9
-
SHA1
1934bdf8c1fcfe2f122c6961a726be5fc23392ca
-
SHA256
1407cd42443854c5e372907b0ee3021ec915ff7d9830d7ecf8cbfda9a83145de
-
SHA512
7e422c26a21d9194138c9831c956f7b5ae211ceddd6d67fe57f714799d17552da340e55dd4919b39f645d5238a45fb1ec51fd92f5a95e886190280894384332c
-
SSDEEP
24576:RhnQ3xI7TaioL0RULpECM1FIQN6j6PSPaXF8mq:RhnKC7VoLKUdfuFIH6SCFjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c422222429dcbf8dc9ec72a488531e9
Files
-
2c422222429dcbf8dc9ec72a488531e9.exe windows:4 windows x86 arch:x86
d93375fd4ca0885c6106f8dd23f8ba1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
HeapSize
IsValidLocale
SetFilePointer
GetSystemTime
GetPrivateProfileSectionW
CreateMutexA
GetCurrentProcess
IsValidCodePage
IsDebuggerPresent
TerminateProcess
QueryPerformanceCounter
InterlockedDecrement
GetProcessHeap
IsBadReadPtr
GetLocaleInfoW
HeapDestroy
GetStartupInfoW
LCMapStringA
ConvertDefaultLocale
WritePrivateProfileStringW
CreateFileA
RtlUnwind
Sleep
UnhandledExceptionFilter
HeapAlloc
GetCurrentProcessId
OpenMutexA
WideCharToMultiByte
GetConsoleCP
HeapValidate
HeapFree
TlsGetValue
GetCurrentThreadId
CreateDirectoryExW
WriteFile
LCMapStringW
GetModuleFileNameA
CreateToolhelp32Snapshot
EnumSystemLocalesA
SetUnhandledExceptionFilter
GetConsoleMode
ExitProcess
GetNamedPipeHandleStateA
InterlockedIncrement
RemoveDirectoryW
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetProcAddress
OutputDebugStringA
ReadFile
RaiseException
GetStringTypeW
GetModuleHandleA
GetACP
LoadLibraryExA
LoadLibraryW
CreateProcessA
GetCurrentThread
GetCommandLineA
GetEnvironmentStringsW
GetStdHandle
GetDateFormatA
FlushConsoleInputBuffer
WriteConsoleA
TlsFree
CompareStringW
LeaveCriticalSection
GetStringTypeA
GetTickCount
GetUserDefaultLCID
GetStartupInfoA
lstrlenA
SetHandleCount
VirtualFree
SetLastError
SetEnvironmentVariableA
GetOEMCP
GetLastError
OutputDebugStringW
WriteConsoleOutputAttribute
MultiByteToWideChar
GetTimeZoneInformation
WriteConsoleW
GetLocaleInfoA
TlsSetValue
FlushViewOfFile
FindFirstFileA
FlushFileBuffers
FreeEnvironmentStringsW
GetConsoleOutputCP
HeapReAlloc
EnterCriticalSection
UnmapViewOfFile
GetCalendarInfoA
TlsAlloc
HeapCreate
VirtualAlloc
EnumCalendarInfoExA
CloseHandle
CompareStringA
GetModuleHandleW
VirtualQuery
DeleteCriticalSection
GetCommandLineW
DebugBreak
GetTimeFormatA
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetModuleFileNameW
LoadLibraryA
InterlockedExchange
GetFileType
comdlg32
PageSetupDlgA
ReplaceTextA
GetOpenFileNameA
wininet
CommitUrlCacheEntryA
InternetCloseHandle
RunOnceUrlCache
FreeUrlCacheSpaceA
InternetUnlockRequestFile
InternetGetConnectedStateExA
SetUrlCacheEntryGroupA
shell32
SHGetSpecialFolderPathW
ExtractAssociatedIconExA
comctl32
ImageList_Add
ImageList_Remove
CreatePropertySheetPageA
ImageList_DragEnter
CreateMappedBitmap
ImageList_SetImageCount
_TrackMouseEvent
DestroyPropertySheetPage
CreateStatusWindow
InitCommonControlsEx
DrawStatusTextW
ImageList_SetIconSize
DrawInsert
ImageList_GetIconSize
CreateToolbar
gdi32
SetWinMetaFileBits
GetRgnBox
GetDCOrgEx
user32
OpenWindowStationW
GetTabbedTextExtentA
DefWindowProcW
OemKeyScan
SetRectEmpty
DdeKeepStringHandle
CheckMenuRadioItem
GetSysColor
SetMenuItemInfoW
MessageBoxW
CopyImage
UnhookWindowsHook
RegisterClassA
TabbedTextOutW
DlgDirSelectComboBoxExA
GetWindowWord
GetListBoxInfo
GetWindowLongA
CharLowerW
DdePostAdvise
InSendMessage
DdeInitializeW
RemovePropA
GetCursorInfo
FlashWindow
RegisterDeviceNotificationA
LoadBitmapW
DdeFreeStringHandle
RegisterClipboardFormatA
LoadCursorW
VkKeyScanExA
GetQueueStatus
DestroyWindow
CopyAcceleratorTableW
SetDeskWallpaper
DialogBoxIndirectParamA
CallNextHookEx
RegisterClassExA
SetMessageQueue
DdeFreeDataHandle
CopyIcon
GetWindowRgn
GetCaretPos
ChildWindowFromPoint
GetGUIThreadInfo
UnhookWinEvent
TranslateAccelerator
IsCharUpperA
SwitchToThisWindow
SetParent
DefWindowProcA
GetWindowThreadProcessId
GetSystemMetrics
ModifyMenuA
SetScrollPos
ReuseDDElParam
GetClassInfoW
DestroyCaret
ShowCaret
CharToOemW
WinHelpA
EnumDesktopWindows
CreateWindowExA
ShowWindow
CharUpperBuffW
DdeCreateDataHandle
PostMessageW
Sections
.text Size: 352KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ