f:\eue
Static task
static1
Behavioral task
behavioral1
Sample
acf62aa65602405aa67886bee61c753e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
acf62aa65602405aa67886bee61c753e.exe
Resource
win10v2004-20240226-en
General
-
Target
acf62aa65602405aa67886bee61c753e
-
Size
580KB
-
MD5
acf62aa65602405aa67886bee61c753e
-
SHA1
4f933364adf87d26070059fe7f1e1acd4a4fcb2e
-
SHA256
16f0339510df9a63acd9a38830cb45564d47fcb57967ed2affb0a059e4b8072b
-
SHA512
50015b71447c52b93c739c8b64065f5102b151e2e5508131c3fc8132a3a63386660b306a30373b89e22cd3e54f731af52665585404fef0759a72a239bd7a87b9
-
SSDEEP
12288:CdIObju63n5VVIwEtq54eekL2+kV2pM7FJ+rn1E:CdRbju63nePtq54ee4vDkJ+rna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acf62aa65602405aa67886bee61c753e
Files
-
acf62aa65602405aa67886bee61c753e.exe windows:4 windows x86 arch:x86
74e2e3629efac356db8b7c1d389ddf1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowWindow
RegisterClassA
DialogBoxIndirectParamA
InsertMenuItemA
CopyAcceleratorTableA
DestroyMenu
MapVirtualKeyW
DefWindowProcA
MessageBoxW
DrawStateA
ChildWindowFromPoint
RegisterDeviceNotificationA
GetLastActivePopup
LoadCursorW
GetMenuItemInfoA
IsClipboardFormatAvailable
GetWindowTextLengthW
DestroyWindow
CheckMenuItem
wsprintfA
ModifyMenuW
ActivateKeyboardLayout
GetKBCodePage
IsCharUpperW
CreateWindowExW
RegisterClassExA
EnumDesktopsA
SetClipboardData
shell32
SHEmptyRecycleBinW
ShellAboutA
SHGetFileInfo
SHUpdateRecycleBinIcon
DragAcceptFiles
comdlg32
ReplaceTextW
PageSetupDlgA
GetSaveFileNameA
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_BeginDrag
ImageList_Copy
CreateStatusWindow
ImageList_GetIconSize
ImageList_DragMove
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_Destroy
ImageList_GetFlags
ImageList_SetFilter
InitCommonControlsEx
ImageList_Merge
CreateMappedBitmap
ImageList_Duplicate
CreateToolbarEx
ImageList_SetDragCursorImage
wininet
FtpPutFileW
kernel32
HeapFree
FlushFileBuffers
GetCurrentProcessId
CompareStringA
GetSystemTime
SetFilePointer
FreeEnvironmentStringsW
ExitProcess
GetStdHandle
IsBadWritePtr
GetProcAddress
HeapAlloc
GetLastError
GetTickCount
GetCurrentProcess
GetOEMCP
TlsGetValue
LCMapStringW
TerminateProcess
OpenSemaphoreW
TlsSetValue
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineA
WideCharToMultiByte
InterlockedDecrement
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
QueryPerformanceCounter
SetHandleCount
InitializeCriticalSection
GetTimeZoneInformation
GetCurrentThread
GetVersion
HeapCreate
GetStringTypeW
SetStdHandle
ReadFile
UnhandledExceptionFilter
SetEnvironmentVariableA
ReadConsoleOutputCharacterW
RtlUnwind
OpenMutexA
GetFileType
GetStartupInfoA
GetCPInfo
GetCurrentThreadId
GetACP
VirtualQuery
GetLocalTime
TlsAlloc
LCMapStringA
DeleteCriticalSection
CloseHandle
TlsFree
LeaveCriticalSection
GetStringTypeA
GetComputerNameA
MultiByteToWideChar
VirtualAlloc
VirtualFree
LoadLibraryA
InterlockedIncrement
HeapReAlloc
GetEnvironmentStrings
InterlockedExchange
EnterCriticalSection
CreateMutexA
SetLastError
HeapDestroy
CompareStringW
GetModuleHandleA
gdi32
CreateDCW
DeleteObject
GetDeviceCaps
GetStretchBltMode
PlayEnhMetaFileRecord
SelectObject
DeleteDC
GetObjectW
GetTextExtentExPointA
Sections
.text Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ