Static task
static1
Behavioral task
behavioral1
Sample
426e5b35af8f6ebbdf6a4e837ca6976d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
426e5b35af8f6ebbdf6a4e837ca6976d.exe
Resource
win10v2004-20231215-en
General
-
Target
426e5b35af8f6ebbdf6a4e837ca6976d
-
Size
310KB
-
MD5
426e5b35af8f6ebbdf6a4e837ca6976d
-
SHA1
53acd02331825c8b72574746203678405d218f30
-
SHA256
20ebe51b44939cfbf5d4ec9d545cab55ecd357874aec933ed34b9ecfb6907ac3
-
SHA512
39a616a3384de88001d3ab29163700c011a2b03c46ab360eec619d286cf31b330f29232df0bd2fa97918f6cdd4ebec105bb4cf868ac8b4c8fd27fab8ea6b40e5
-
SSDEEP
6144:GZ65KMTNzzfnZNMcWB4/AYOP4gvgpIyrHbrVZlfJ73dFWylPGFcr8:GmNnTW4/AXPMpzx5lPecY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426e5b35af8f6ebbdf6a4e837ca6976d
Files
-
426e5b35af8f6ebbdf6a4e837ca6976d.exe windows:4 windows x86 arch:x86
665f84776c6c37ddea0b196fc76a797f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetACP
GetCommandLineA
GetModuleHandleA
GlobalFree
GetCurrentProcessId
GetLocaleInfoA
FlushFileBuffers
GetSystemDirectoryA
VirtualProtect
ReadConsoleA
GetCompressedFileSizeA
IsDebuggerPresent
GetCurrentThread
InterlockedExchange
OpenMutexA
HeapCreate
GetStdHandle
SetEvent
FreeEnvironmentStringsA
RaiseException
user32
SetActiveWindow
SetForegroundWindow
GetClassNameA
BeginPaint
FillRect
IsIconic
EndPaint
FrameRect
ReleaseDC
GetFocus
GetWindowTextA
GetDlgItem
DrawTextA
ShowWindow
wsprintfA
ValidateRgn
GetParent
GetCursorPos
GetWindow
linkinfo
GetLinkInfoData
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
CreateLinkInfoA
rtutils
LogErrorA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ