Static task
static1
Behavioral task
behavioral1
Sample
42ab80bea83ca28028ff6c0683112767.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42ab80bea83ca28028ff6c0683112767.exe
Resource
win10v2004-20231215-en
General
-
Target
42ab80bea83ca28028ff6c0683112767
-
Size
146KB
-
MD5
42ab80bea83ca28028ff6c0683112767
-
SHA1
5e6be4f5429c6af51f374d71ef6f6b8e5d770369
-
SHA256
13b3c0dfc85647f81e74d6e6d9540fdc103719cdc1c1d76238938667509d10c6
-
SHA512
292f9573246efa185783c66e2eb07b8e82dac47a822bb8f83d7ca01aba1e0742655bd8c0fcaade11230716766b7b309037fd6fb0a392e629f072282729d83bf0
-
SSDEEP
3072:wOpXym/FMyEGyg1qq5xQfJrcji3ZSgMFdnmufnWXJN/:1YGyW5+fJQutMFdPOD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ab80bea83ca28028ff6c0683112767
Files
-
42ab80bea83ca28028ff6c0683112767.exe windows:4 windows x86 arch:x86
63752c14ea5e27db06591e49f551d430
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathW
msimg32
AlphaBlend
gdi32
GdiFlush
DeleteObject
CreateCompatibleDC
CreateDIBSection
BitBlt
SelectObject
DeleteDC
shlwapi
PathAddBackslashW
PathRemoveBackslashW
PathUnquoteSpacesW
PathRemoveArgsW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
user32
ReleaseDC
ShowWindow
CopyRect
SetForegroundWindow
DrawIcon
SetRect
GetWindowRect
GetLastActivePopup
IsIconic
GetClientRect
GetSystemMetrics
GetDC
TranslateMessage
advapi32
RegCloseKey
wininet
InternetConnectW
InternetOpenUrlW
InternetGetConnectedState
InternetReadFile
InternetOpenW
HttpSendRequestA
HttpOpenRequestW
InternetCloseHandle
kernel32
GetSystemDefaultLangID
SetLastError
GetModuleHandleA
ClearCommBreak
GetVersionExA
ClearCommBreak
GetSystemTimeAsFileTime
CompareStringA
GetWindowsDirectoryA
GetCurrentProcessId
WaitForSingleObject
GetTickCount
LoadLibraryA
ExitProcess
DeleteCriticalSection
QueryPerformanceCounter
EnumResourceNamesW
GetCurrentThreadId
FreeLibrary
GetModuleFileNameA
ExitProcess
CloseHandle
GetSystemDirectoryA
GetStartupInfoW
InitializeCriticalSection
GetLastError
InterlockedExchange
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ