Static task
static1
Behavioral task
behavioral1
Sample
a21531678d679071eed0f21fe8236275.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a21531678d679071eed0f21fe8236275.exe
Resource
win10v2004-20240221-en
General
-
Target
a21531678d679071eed0f21fe8236275
-
Size
425KB
-
MD5
a21531678d679071eed0f21fe8236275
-
SHA1
c42ed1c147c6f05562b29026b93aa1e16a97d8d3
-
SHA256
04c8b56d5e074ef5ab32193d2010a085dc7664e312cba94e4a1df6b9e529815b
-
SHA512
746a0cd7cbce77d7340b06bf096986e6ced6f8acfd937556ec4a3b79c88caeb00fa499a07a16f0ca4f6d6dbf4d9642905ae78e2b5a6ecf84f86e4164b2d9f104
-
SSDEEP
12288:jCXTuMC9KxBuv4PG7pcQ58+SqAGciaz1wDeMr:jm56Ouv4+7a2PpAGci86r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a21531678d679071eed0f21fe8236275
Files
-
a21531678d679071eed0f21fe8236275.exe windows:4 windows x86 arch:x86
4ee3359f63f862b9e9eaf6ed74386b11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDCOrgEx
CreateSolidBrush
SetColorAdjustment
CreateDIBSection
ExcludeClipRect
wininet
InternetFindNextFileA
InternetSetDialStateW
InternetSetOptionExW
CreateUrlCacheEntryW
SetUrlCacheEntryGroup
FindNextUrlCacheEntryExA
SetUrlCacheEntryInfoW
InternetCombineUrlA
InternetAlgIdToStringA
CommitUrlCacheEntryW
ShowX509EncodedCertificate
HttpQueryInfoW
HttpOpenRequestW
GetUrlCacheGroupAttributeA
FtpGetFileSize
InternetOpenW
HttpOpenRequestA
InternetShowSecurityInfoByURLA
LoadUrlCacheContent
advapi32
RegSetValueExW
RegEnumKeyExA
RegSaveKeyW
GetUserNameW
CryptEnumProvidersW
CryptAcquireContextA
LookupSecurityDescriptorPartsA
RegCreateKeyA
RegEnumValueA
CryptGetProvParam
InitiateSystemShutdownA
CryptDuplicateHash
RegQueryValueExA
LogonUserA
AbortSystemShutdownW
CryptHashData
RegSaveKeyA
LookupPrivilegeDisplayNameA
DuplicateToken
shell32
SHGetSettings
SHGetNewLinkInfo
DragQueryFileAorW
ExtractIconW
ShellHookProc
DragQueryFileA
SHGetPathFromIDListA
SHEmptyRecycleBinW
SHUpdateRecycleBinIcon
ExtractIconExA
ExtractIconEx
RealShellExecuteW
ShellExecuteExW
SHQueryRecycleBinA
SHFileOperationA
SHAppBarMessage
ExtractAssociatedIconExW
DragAcceptFiles
kernel32
GlobalUnfix
GetProcAddress
RtlUnwind
GetVersionExA
CreateEventW
GetCurrentThreadId
LoadLibraryA
DeleteAtom
QueryPerformanceCounter
WritePrivateProfileSectionW
FindFirstFileExW
GetSystemTimeAsFileTime
ReadConsoleOutputCharacterW
GetCurrentProcess
SetConsoleScreenBufferSize
HeapFree
GetModuleHandleA
InterlockedExchange
GetTickCount
ExitProcess
WaitForSingleObjectEx
TerminateProcess
FreeLibraryAndExitThread
VirtualAlloc
GetModuleFileNameA
GetProcAddress
EnumSystemLocalesA
EnumTimeFormatsW
VirtualQuery
GetFileSize
LocalCompact
CreateWaitableTimerA
GetCurrentProcessId
HeapReAlloc
GetSystemDefaultLangID
FillConsoleOutputCharacterA
LoadLibraryExA
CreateNamedPipeA
HeapAlloc
user32
DrawTextW
GetIconInfo
OemKeyScan
IsDialogMessageW
OpenDesktopA
BroadcastSystemMessageW
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ