Static task
static1
Behavioral task
behavioral1
Sample
adfa281a44ca213e4484e4e9c0bdd906.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
adfa281a44ca213e4484e4e9c0bdd906.exe
Resource
win10v2004-20231215-en
General
-
Target
adfa281a44ca213e4484e4e9c0bdd906.exe
-
Size
353KB
-
MD5
adfa281a44ca213e4484e4e9c0bdd906
-
SHA1
dba98251956ccbb30ff5353ce7b914f53c8b50de
-
SHA256
79f02d09e9851cf6a9f886bf117f695568c1c0ce5cd1f79c6584b9d315900106
-
SHA512
995bdd8fa7925f07624680b4132d9bf1f831ad63b71f0a2c14b9578ec6b6f78e7389613f2b3268bdd08d8d679ad3a666f41e959dcc1a46b09cf03b6f15aad00b
-
SSDEEP
6144:9/UYiiTUU9mzr0bWt1zdkhlXkL1tWYeTneWzChooe10Ssf/G:VUTGUimX0bypixkptWIWkgySsfu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfa281a44ca213e4484e4e9c0bdd906.exe
Files
-
adfa281a44ca213e4484e4e9c0bdd906.exe.exe windows:4 windows x86 arch:x86
4987d681c7d9054b197f674e2ad41e0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleHandleA
ExitProcess
GetProcAddress
GetStartupInfoA
user32
SetWindowTextA
UpdateWindow
InvalidateRect
KillTimer
SetTimer
DialogBoxParamA
DestroyWindow
GetWindowRect
PostQuitMessage
DefWindowProcA
SendMessageA
GetDlgItem
EnableWindow
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
CreateWindowExA
ShowWindow
LoadStringA
LoadCursorA
LoadIconA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
GetStockObject
CreateSolidBrush
msvcrt
strlen
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
sscanf
memset
getenv
??2@YAPAXI@Z
atoi
_except_handler3
_ftime
strcpy
memcpy
??3@YAXPAX@Z
time
srand
sprintf
_pctype
_isctype
__mb_cur_max
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ