Static task
static1
Behavioral task
behavioral1
Sample
52cf90f9e2a684ee818d8dbdbf39be4d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52cf90f9e2a684ee818d8dbdbf39be4d.exe
Resource
win10v2004-20231215-en
General
-
Target
52cf90f9e2a684ee818d8dbdbf39be4d
-
Size
61KB
-
MD5
52cf90f9e2a684ee818d8dbdbf39be4d
-
SHA1
aa98047190ccc3cf7cfebfd8ac69c775afe2a76e
-
SHA256
79f201b7d295f154de4f16f048ea4812de1bf17d1b61e354b78ee7dd1cd267ac
-
SHA512
543a351ce3c79e57b80878b4afed14ed88e0cb6510c1a9456d4b128f8367eacd982796df6cc7c20d68784b810f94761c6f3c5c88774d890300165e79ad4b8a20
-
SSDEEP
1536:Vqx8sxoY+tGFdSAMdzcx4vkNGXs+FxATi/Q2w:QBOYidhcxkkNCs+FxATi/Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52cf90f9e2a684ee818d8dbdbf39be4d
Files
-
52cf90f9e2a684ee818d8dbdbf39be4d.exe windows:4 windows x86 arch:x86
8f09fb407c1d7ddd59a01a8a161cf653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCapture
CopyRect
ReleaseCapture
KillTimer
ScreenToClient
InvertRect
MessageBoxA
ClientToScreen
ValidateRect
GetDlgCtrlID
SetTimer
GetMessagePos
TranslateMessage
SetCursor
DispatchMessageA
PtInRect
GetWindowTextA
UnregisterClassA
LoadIconA
RegisterClassA
GetDC
ReleaseDC
BeginPaint
EndPaint
DestroyWindow
PostQuitMessage
DialogBoxParamA
RegisterHotKey
GetDesktopWindow
GetActiveWindow
DefWindowProcA
GetClientRect
FillRect
GetWindow
PostMessageA
UpdateWindow
PeekMessageA
LoadAcceleratorsA
CreateWindowExA
ShowWindow
GetMessageA
TranslateAcceleratorA
MessageBeep
SetWindowTextA
SetDlgItemInt
EnableWindow
CheckDlgButton
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
GetParent
SetActiveWindow
EndDialog
GetDlgItem
SetDlgItemTextA
IsWindow
SendMessageA
wsprintfA
GetWindowRect
GetSystemMetrics
UnhookWindowsHook
CharPrevA
SetWindowsHookA
WinHelpA
GetSysColor
UnregisterHotKey
GetMenu
MoveWindow
CallNextHookEx
SetWindowPos
LoadStringA
EnableMenuItem
InvalidateRect
LoadCursorA
kernel32
GetPrivateProfileIntA
SetPriorityClass
GetCurrentProcess
lstrcpynA
GetStartupInfoA
GetLastError
MultiByteToWideChar
GetProcAddress
WideCharToMultiByte
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetCPInfo
GetOEMCP
GetACP
RaiseException
GetVersion
GetCommandLineA
GetEnvironmentStrings
lstrcatA
GetModuleHandleA
FreeResource
FindResourceA
LoadResource
LockResource
lstrlenA
GetPriorityClass
OpenSemaphoreA
CreateSemaphoreA
OpenFile
lstrcpyA
GetVersionExA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
gdi32
GetStockObject
StretchDIBits
SetBkColor
GetObjectA
CreateFontIndirectA
GetTextExtentPointA
CreateSolidBrush
DeleteObject
TextOutA
SelectObject
SetTextColor
SetMapMode
SetViewportOrgEx
SetViewportExtEx
SetWindowOrgEx
SetWindowExtEx
MoveToEx
LineTo
Polygon
GetTextMetricsA
SetBkMode
comdlg32
GetOpenFileNameA
winmm
sndPlaySoundA
avicap32
capGetDriverDescriptionA
capCreateCaptureWindowA
msacm32
acmMetrics
acmFormatChooseA
acmFormatDetailsA
acmGetVersion
shell32
ShellExecuteA
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE