?MNDkjiduIUDIUiuDIUdIOpDJKKDLKJDLIuyd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
569c7ffeadd0f23ab2837f525764cd68.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
569c7ffeadd0f23ab2837f525764cd68.exe
Resource
win10v2004-20231215-en
General
-
Target
569c7ffeadd0f23ab2837f525764cd68
-
Size
244KB
-
MD5
569c7ffeadd0f23ab2837f525764cd68
-
SHA1
0663ac69399be472da86f271d9526b1bdd1b68e1
-
SHA256
c070be12c5118bed28c71a6d408129cbaa58e94db1634f38a1b186513e385fed
-
SHA512
bc88268a4f920f5a0c9ca584193fb9792c04f1d73196af2f401afc7d457e709aa1b831e32d3b8382189300e93369ca174de4a92533adf3f834ba1c367fdd291a
-
SSDEEP
6144:WRXuwFDZfPQUhuji7rR93su4HiKtAhFXhdvu0:WRew/NTs5CKtAhFXhl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 569c7ffeadd0f23ab2837f525764cd68
Files
-
569c7ffeadd0f23ab2837f525764cd68.exe windows:5 windows x86 arch:x86
64f0205844730adece4bf08ecd7458b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapWindowPoints
GetWindowLongW
CreateDialogIndirectParamW
AttachThreadInput
SetMenuDefaultItem
GetMenuStringW
GetCaretPos
LoadIconA
ChildWindowFromPoint
FindWindowExW
BeginPaint
GetForegroundWindow
SendMessageA
KillTimer
ModifyMenuW
GetShellWindow
AppendMenuA
SendDlgItemMessageA
LockWindowUpdate
GetMenuItemCount
DefWindowProcA
GetSubMenu
CreateDialogParamA
AppendMenuW
ScreenToClient
GetDialogBaseUnits
MapVirtualKeyW
GetScrollInfo
SetWindowPlacement
LoadMenuW
mouse_event
CopyAcceleratorTableW
CreateDialogParamW
IsCharLowerA
CharUpperBuffA
GetWindowDC
gdi32
GetTextExtentPointW
LPtoDP
ScaleWindowExtEx
RealizePalette
SelectPalette
LineDDA
CreateFontIndirectW
IntersectClipRect
CreateDIBitmap
MoveToEx
SetROP2
CreateBitmapIndirect
CreateDCW
PtInRegion
GetBrushOrgEx
CreateFontW
comctl32
ImageList_GetImageCount
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Create
kernel32
GlobalFindAtomW
GetUserDefaultLangID
GlobalDeleteAtom
GetDateFormatW
VerifyVersionInfoW
TryEnterCriticalSection
GetSystemDefaultLangID
CopyFileA
SetThreadLocale
DisconnectNamedPipe
ExitThread
MoveFileA
GlobalLock
SetCommTimeouts
SetErrorMode
LCMapStringA
GetCommandLineA
Exports
Exports
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 55KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ