Static task
static1
Behavioral task
behavioral1
Sample
42bef4107707afeecdeb5e96aa363d7a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42bef4107707afeecdeb5e96aa363d7a.exe
Resource
win10v2004-20231215-en
General
-
Target
42bef4107707afeecdeb5e96aa363d7a
-
Size
588KB
-
MD5
42bef4107707afeecdeb5e96aa363d7a
-
SHA1
049eaccc2db2f4ab79e7565d937a8c5f244a804b
-
SHA256
259cf9db7a78ecd756c95eb8f21cffdc135696192d6f66864e76e2e5e893d796
-
SHA512
031aaa868fbeddbe8ff2e0c02e5a6f4c7630f580557c93b0a1f52372840a2736e04e0b682bd80f9e4b0a79b8f9ce0e8b40308066e9e8e711a7f30e6f8959f17d
-
SSDEEP
12288:4ATKdQQaFtu0QDb1aLqtqFCnDT8wnqfZNTrIY0nxJgzPY:4AtltuDDbEL4Ln3PncNvv0nbgA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42bef4107707afeecdeb5e96aa363d7a
Files
-
42bef4107707afeecdeb5e96aa363d7a.exe windows:4 windows x86 arch:x86
3547ff9981e420bd221057bac64d3a65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageA
LoadCursorFromFileW
DlgDirSelectExW
MsgWaitForMultipleObjectsEx
GetSystemMenu
LoadCursorA
GetCursorPos
EnableScrollBar
LoadCursorW
PtInRect
RegisterClassExA
GetWindowTextLengthA
CreateIcon
DrawStateA
CallWindowProcA
EnumPropsExA
CharPrevA
SendIMEMessageExW
WindowFromPoint
GetProcessDefaultLayout
GetKeyboardLayoutList
InSendMessage
RegisterClipboardFormatA
SetKeyboardState
GetCaretBlinkTime
RegisterClassA
GetMenuItemInfoW
IsCharAlphaW
GetClassNameA
SetRect
SetPropW
SendDlgItemMessageA
FindWindowExA
UnhookWindowsHookEx
GetTopWindow
SetWindowsHookW
CharToOemW
IsDialogMessageW
CloseWindowStation
PaintDesktop
GetWindowTextLengthW
EnumThreadWindows
comctl32
ImageList_SetImageCount
ImageList_DrawEx
ImageList_Draw
CreateUpDownControl
ImageList_DragEnter
ImageList_Destroy
ImageList_DragLeave
DrawStatusText
DestroyPropertySheetPage
ImageList_Replace
ImageList_AddMasked
CreateToolbarEx
GetEffectiveClientRect
ImageList_LoadImageA
ImageList_Copy
ImageList_Merge
InitCommonControlsEx
ImageList_AddIcon
ImageList_EndDrag
ImageList_DragMove
CreatePropertySheetPage
ImageList_SetFlags
ImageList_BeginDrag
CreateStatusWindowW
comdlg32
GetSaveFileNameA
kernel32
GetStringTypeA
InterlockedIncrement
QueryPerformanceCounter
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
LoadResource
VirtualQuery
GetOEMCP
OpenMutexA
GlobalUnlock
MoveFileExA
GetCurrentThread
HeapDestroy
GlobalAlloc
InitializeCriticalSection
InterlockedDecrement
SetLastError
WriteConsoleW
SetHandleCount
lstrlenA
lstrcmpiA
GetTickCount
HeapFree
GetCommandLineA
GetExitCodeProcess
GetVersion
GetFileAttributesW
GetSystemTimeAsFileTime
CreateMutexW
HeapCreate
FindClose
FindFirstFileW
GetModuleHandleA
GetStringTypeExA
ExitProcess
GetTimeFormatA
GetCommandLineW
ReadFile
GetVersionExA
GetCurrentThreadId
CreateMutexA
FlushViewOfFile
GetLastError
CreateFileMappingA
EnterCriticalSection
GlobalFree
GetPrivateProfileStructA
GetSystemDirectoryA
GetThreadLocale
GetStartupInfoA
InterlockedExchange
GetConsoleCP
GetCPInfo
FlushFileBuffers
GetNamedPipeInfo
LCMapStringW
FreeEnvironmentStringsA
ReadConsoleOutputW
LoadLibraryW
TlsFree
DeleteCriticalSection
GetStdHandle
GetCurrentProcessId
HeapAlloc
HeapReAlloc
WriteConsoleA
EnumSystemLocalesA
GetWindowsDirectoryA
SetConsoleCtrlHandler
GetStringTypeW
GetProcAddress
LeaveCriticalSection
WritePrivateProfileStructW
EnumResourceLanguagesA
GetProcessHeap
GetProcessShutdownParameters
GetAtomNameA
SetConsoleOutputCP
RtlUnwind
TlsAlloc
CompareStringW
DeleteFileA
GetLocaleInfoA
EnumDateFormatsExA
WriteFile
GetTimeZoneInformation
FreeEnvironmentStringsW
SetFilePointer
GetEnvironmentStrings
GetConsoleMode
HeapSize
WritePrivateProfileStructA
SetLocaleInfoA
GetLocaleInfoW
LoadLibraryA
IsDebuggerPresent
SetEnvironmentVariableA
VirtualFree
SetWaitableTimer
SetFileTime
ReadConsoleOutputCharacterW
LockResource
SetConsoleTitleW
FoldStringA
CreateToolhelp32Snapshot
CreateMailslotA
IsValidLocale
GetPrivateProfileIntA
TlsGetValue
GetACP
Sleep
MapViewOfFileEx
IsValidCodePage
RemoveDirectoryA
TlsSetValue
lstrlen
GetDateFormatA
FreeLibrary
GetModuleFileNameA
UnlockFileEx
GetModuleFileNameW
GetStringTypeExW
InterlockedCompareExchange
WideCharToMultiByte
CloseHandle
GetShortPathNameA
TerminateProcess
CompareStringA
OpenFileMappingA
SetUnhandledExceptionFilter
LCMapStringA
ResumeThread
UnhandledExceptionFilter
GetStartupInfoW
GlobalHandle
CreateSemaphoreW
MultiByteToWideChar
OpenSemaphoreA
GetEnvironmentStringsW
GetFileType
lstrcpynA
GetConsoleOutputCP
GetUserDefaultLCID
CreateFileA
SetStdHandle
VirtualAlloc
EnumResourceLanguagesW
LocalAlloc
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ