Static task
static1
Behavioral task
behavioral1
Sample
39eda11bdef90b48a296684701324664.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39eda11bdef90b48a296684701324664.exe
Resource
win10v2004-20231222-en
General
-
Target
39eda11bdef90b48a296684701324664
-
Size
36KB
-
MD5
39eda11bdef90b48a296684701324664
-
SHA1
f8753efe6a061648f45823000288bec2b22fb9ad
-
SHA256
a85961696cb9a1c5d4e9bc12851729679b39aaf3f3641987908daf3c4e305793
-
SHA512
7d4276e3dd50e4feb71318cb5074f7e08b0abaae091ecf88a902fa3e76fc37604671c8767366ec77b6a88f22739d5a0e9807014bbfee3d58ab50e43ae4980cbf
-
SSDEEP
768:MRAi1f+VWflxvqhHIaYgNjtVcHNIVTt0L:M2i3fII0tVcsT0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39eda11bdef90b48a296684701324664
Files
-
39eda11bdef90b48a296684701324664.exe windows:4 windows x86 arch:x86
6828550f0a2d6fefde7ca7e1d6f64a56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUserObjectSecurity
SetCursor
GetWindowLongA
GetPropA
DestroyIcon
FrameRect
SystemParametersInfoA
EndDeferWindowPos
GetFocus
DispatchMessageA
GetDlgCtrlID
ClientToScreen
DeleteMenu
RegisterClassExA
UnionRect
kernel32
InterlockedExchange
InitializeCriticalSection
GetModuleHandleA
ExpandEnvironmentStringsA
OpenProcess
WriteFile
CreateFileMappingA
HeapCreate
QueryPerformanceCounter
GetCommandLineW
DeleteFileA
lstrcpynA
IsBadStringPtrA
GetConsoleMode
SearchPathA
DeviceIoControl
UnhandledExceptionFilter
Sleep
InterlockedIncrement
CompareStringA
GetSystemTimeAsFileTime
gdi32
SetTextAlign
CreateRectRgnIndirect
CreateDIBSection
SaveDC
CreateRectRgn
SetTextColor
RestoreDC
CreateFontIndirectA
SetROP2
GetTextExtentPoint32A
GetTextMetricsA
Polyline
Rectangle
CreateCompatibleDC
BitBlt
msvcrt
wcslen
wcsstr
strspn
wcsncpy
_waccess
_stat
_vsnwprintf
_controlfp
wcscpy
__mb_cur_max
sprintf
_itow
_onexit
memcpy
iswctype
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ