Static task
static1
Behavioral task
behavioral1
Sample
42ede98613e8a0840e2f14cff90f8ab2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42ede98613e8a0840e2f14cff90f8ab2.exe
Resource
win10v2004-20231215-en
General
-
Target
42ede98613e8a0840e2f14cff90f8ab2
-
Size
369KB
-
MD5
42ede98613e8a0840e2f14cff90f8ab2
-
SHA1
01beb7b2136590cc7878d329ea8685039a69d577
-
SHA256
58f76170d4789c54f683348d85c181fe52f370c2b885d789ad100f589858e002
-
SHA512
3bbb87543a1321744961fd4c8910846880a8b332986749fb154a79951d68df32d62bf999b1657737f8c0947c4c849bdcb89e7172b0245cb788d86c1a7587607a
-
SSDEEP
6144:YrAJNKLc4J3bukAnBCwhzv+nXC2KkCWmHZCkCOSQruAWtvQNtIP2IMBeG2ICpG:sAuYbkYbV+nXCMCN5Cj3QrnW2y2+G2IZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ede98613e8a0840e2f14cff90f8ab2
Files
-
42ede98613e8a0840e2f14cff90f8ab2.exe windows:4 windows x86 arch:x86
3342098b895cebdb6915e7c31293568c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegReplaceKeyW
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyW
RegLoadKeyA
RegEnumValueA
RegGetKeySecurity
RegOpenKeyExW
RegEnumValueW
RegCreateKeyExW
RegQueryValueW
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyW
RegCreateKeyW
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueA
RegDeleteValueA
RegCreateKeyExA
RegLoadKeyW
RegReplaceKeyA
RegFlushKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyA
RegFlushKey
RegEnumKeyExA
RegEnumValueW
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegDeleteValueA
RegLoadKeyW
RegGetKeySecurity
RegOpenKeyExA
RegQueryInfoKeyW
RegCreateKeyW
RegReplaceKeyW
RegLoadKeyA
RegReplaceKeyA
RegDeleteKeyW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyA
RegEnumKeyExW
RegQueryValueW
RegQueryValueA
RegOpenKeyExW
RegEnumValueA
RegEnumKeyA
RegOpenKeyW
user32
GetCursor
AppendMenuW
GetDlgItem
DrawTextW
IsWindow
GetWindowTextA
DialogBoxParamW
GetFocus
InsertMenuA
GetWindowTextLengthA
LoadMenuA
CreateIcon
CloseWindow
IsMenu
GetDC
GetMenu
DialogBoxParamA
EndDialog
CalcMenuBar
LoadCursorA
CopyIcon
AppendMenuA
AlignRects
DrawIcon
BlockInput
DrawTextA
CopyRect
CopyImage
DrawIconEx
GetMenu
DialogBoxParamW
DrawTextA
AppendMenuW
GetDlgItem
CopyImage
CreateIcon
DialogBoxParamA
GetFocus
CloseWindow
AlignRects
GetCursor
GetWindowTextLengthA
GetWindowTextA
CopyRect
DrawTextW
CopyIcon
IsWindow
CalcMenuBar
BlockInput
LoadMenuA
EndDialog
DrawIconEx
AppendMenuA
IsMenu
DrawIcon
InsertMenuA
GetDC
LoadCursorA
kernel32
GetLastError
lstrcatA
GetLastError
GlobalAlloc
GetLastError
lstrcmpiA
GetLastError
GetLocalTime
GetLastError
GetFileSize
GetLastError
WideCharToMultiByte
GetLastError
GetDateFormatA
GetLastError
GetFileAttributesA
GetLastError
GetStringTypeW
GetLastError
lstrcpynA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d2ta Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 564B
IMAGE_SCN_MEM_READ
.r42c Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ