Static task
static1
Behavioral task
behavioral1
Sample
528643309f3c255f9d5252846878599a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
528643309f3c255f9d5252846878599a.exe
Resource
win10v2004-20231222-en
General
-
Target
528643309f3c255f9d5252846878599a
-
Size
44KB
-
MD5
528643309f3c255f9d5252846878599a
-
SHA1
18b2a71959368b969925754ac1ad8feb16bfe8ef
-
SHA256
a4e103be79b3d53d2f5d35489985e3bef68c58c93662ed386e08564ff4750ce9
-
SHA512
51317927d121ff76aa106b723209e7da59b9999b7e17fe4a82f777aa30cfe13da76356073831aa7daf2f23b47c73b1bbc8b3c2ac482b98b4e1695ee9b0666321
-
SSDEEP
384:KSQdQDBs9THDaDyQoF5CU/EP3DriKP6hb/JBou5ZskqSCSMKPcfCoUKi+UdFy1:SeDBAzDZFDKP6JJSuSTL6wQCUdo1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528643309f3c255f9d5252846878599a
Files
-
528643309f3c255f9d5252846878599a.exe windows:4 windows x86 arch:x86
72244821c450fba25d7725b246fe1dad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
DialogBoxParamW
AppendMenuW
CloseWindow
GetWindowTextLengthA
DrawTextA
GetMenu
GetDC
LoadMenuA
CopyRect
BlockInput
EndDialog
GetCursor
IsMenu
CreateIcon
DrawIcon
DialogBoxParamA
InsertMenuA
AppendMenuA
IsWindow
kernel32
DeleteFileA
GetCommandLineA
CloseHandle
GlobalFree
WideCharToMultiByte
GetFileType
GetStringTypeA
GetStdHandle
HeapFree
GetStringTypeW
lstrcpynA
lstrcpyA
GlobalAlloc
GetLastError
GetDateFormatA
lstrcmpA
GetModuleHandleA
SetLastError
GetFileSize
lstrcmpiA
comctl32
ImageList_GetDragImage
ImageList_DragLeave
ImageList_EndDrag
ImageList_Draw
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Read
ImageList_GetImageRect
ImageList_Replace
ImageList_Remove
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_DrawIndirect
advapi32
RegDeleteValueA
RegReplaceKeyW
RegOpenKeyW
RegEnumValueA
RegQueryValueW
RegDeleteKeyA
RegLoadKeyA
RegEnumKeyExW
RegDeleteValueW
RegFlushKey
RegCreateKeyW
RegOpenKeyExW
RegEnumValueW
RegOpenKeyA
RegDeleteKeyW
RegCreateKeyExA
RegQueryInfoKeyW
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ