Static task
static1
Behavioral task
behavioral1
Sample
a26fcbb34b19b746211abe9a0548d4cc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a26fcbb34b19b746211abe9a0548d4cc.exe
Resource
win10v2004-20240221-en
General
-
Target
a26fcbb34b19b746211abe9a0548d4cc
-
Size
42KB
-
MD5
a26fcbb34b19b746211abe9a0548d4cc
-
SHA1
029e100165e52b1305b93f0369a877737048c6df
-
SHA256
d521f9904cdac575e13a34ceb2bdf48c28015171ba3ad5c467102769b62cd74f
-
SHA512
63a5cee36626aa1ff2ff7719196cb94dc516e84683856bba5796595e8a2b47e7d08627ee396ba6830a76d70315c3d128f02534d94b10513d464e32cb2ad6f909
-
SSDEEP
768:1Uany1gvy7pBz5Jxj0aycq0k4mEiFaavyoLgRS/hxxcnt8UyYL/A0Kr+a7ieuSAD:5nyWKVBOa1q0k4mX8aKCgRwc8UyYL/A+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a26fcbb34b19b746211abe9a0548d4cc
Files
-
a26fcbb34b19b746211abe9a0548d4cc.exe windows:4 windows x86 arch:x86
6718a1f6e87291f1ba5ddf792ffb5dfb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BackupWrite
CancelWaitableTimer
CreateToolhelp32Snapshot
DeleteCriticalSection
ExitProcess
FileTimeToDosDateTime
FreeLibraryAndExitThread
GetCalendarInfoA
GetCalendarInfoW
GetCurrencyFormatA
GetCurrentDirectoryA
GetExitCodeProcess
GetFullPathNameA
GetLongPathNameA
GetOEMCP
GetPrivateProfileStructW
GetProcessTimes
GetVersionExW
InterlockedDecrement
MapViewOfFileEx
OutputDebugStringA
OutputDebugStringW
ReadFile
ScrollConsoleScreenBufferW
SetCommTimeouts
SetFileAttributesW
SetMessageWaitingIndicator
SetThreadPriorityBoost
WriteConsoleInputW
user32
CheckDlgButton
CreateIcon
DdeClientTransaction
DdeDisconnect
DdeGetData
DdeUninitialize
DefFrameProcA
DispatchMessageA
DrawAnimatedRects
DrawStateA
GetAsyncKeyState
GetCursorPos
GetDC
GetThreadDesktop
ImpersonateDdeClientWindow
InvalidateRgn
OemToCharA
PaintDesktop
PostMessageW
SetCaretPos
SetLastErrorEx
SetProcessWindowStation
SubtractRect
SwitchDesktop
SwitchToThisWindow
TranslateMessage
VkKeyScanExA
WINNLSGetIMEHotkey
wsprintfW
gdi32
AngleArc
CheckColorsInGamut
CreateCompatibleBitmap
CreateEllipticRgnIndirect
CreateFontIndirectW
CreateICW
CreateMetaFileW
CreateSolidBrush
EnumObjects
FloodFill
GetColorSpace
GetEnhMetaFileA
GetICMProfileW
GetKerningPairsW
GetLayout
GetRgnBox
PaintRgn
RectInRegion
RemoveFontResourceA
ResetDCA
SetBitmapBits
SetDIBColorTable
SetPolyFillMode
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE