Static task
static1
Behavioral task
behavioral1
Sample
2d90a54c62a66ad641a180646c36a293.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d90a54c62a66ad641a180646c36a293.exe
Resource
win10v2004-20231215-en
General
-
Target
2d90a54c62a66ad641a180646c36a293
-
Size
24KB
-
MD5
2d90a54c62a66ad641a180646c36a293
-
SHA1
1877f8fc3def86e845ed6650f0602d57b20bd838
-
SHA256
a4a51dee90ff758e8bc9a8bfef81bc5689339c46f8e840515f2569f99578d8a9
-
SHA512
04ae8c57d6ae66b1093a10c0166c14ac2cce371891180767f23f89a7ba1f94171a08fd5a2ea60c7da1f50cfa4604c330971a86048fbb0640afa786d35877d50c
-
SSDEEP
192:dAPsVtKYoIeo0GTCY2OZPdn1oynvd0NfEbGf2ewb:dABYoKv2QPl1xdefEIab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d90a54c62a66ad641a180646c36a293
Files
-
2d90a54c62a66ad641a180646c36a293.exe windows:4 windows x86 arch:x86
35598735a7edf65305aab5817df7af25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3262
ord2985
ord3081
ord3136
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord795
ord2514
ord5265
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord3147
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord3259
ord4465
ord3402
ord4627
ord3721
ord1146
ord1168
ord567
ord324
ord825
ord4234
ord4710
ord2379
ord755
ord470
ord4376
ord4224
ord2818
ord535
ord6874
ord860
ord941
ord540
ord823
ord668
ord1980
ord4204
ord4058
ord858
ord3181
ord2781
ord2770
ord356
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord537
ord536
ord800
ord2915
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2124
ord5277
ord2055
ord2302
ord1576
msvcrt
_except_handler3
__set_app_type
__p__fmode
__setusermatherr
_acmdln
exit
_setmbcp
_strupr
_mbscmp
__CxxFrameHandler
strstr
__p__commode
_adjust_fdiv
_controlfp
_initterm
__getmainargs
malloc
_XcptFilter
_exit
_onexit
__dllonexit
kernel32
GetDriveTypeA
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
LocalFree
GetLogicalDriveStringsA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
SendMessageA
DrawIcon
LoadIconA
advapi32
GetAce
SetNamedSecurityInfoA
GetNamedSecurityInfoA
LookupAccountNameA
AddAccessAllowedAceEx
AddAce
InitializeAcl
GetLengthSid
GetAclInformation
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE