Static task
static1
Behavioral task
behavioral1
Sample
ab07b2c322d29b3bdaf9725796b03c45.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab07b2c322d29b3bdaf9725796b03c45.exe
Resource
win10v2004-20240226-en
General
-
Target
ab07b2c322d29b3bdaf9725796b03c45
-
Size
226KB
-
MD5
ab07b2c322d29b3bdaf9725796b03c45
-
SHA1
bbbedeb89f877f853e740893fbd34488c1d2e27f
-
SHA256
91b5c117ebc1d735aa9556dcc5ce0f460af39431ab775f03f0934b7530651b2b
-
SHA512
40fda6479ad1efbaf5144f43d6ebc7089cce2dc732f06a697f6b6bcada9a4655945b69344ddffe93d9af494821dc97ee333e42dffdb6738c0a745edf9043f7e9
-
SSDEEP
3072:V+sHDoDW0yLyszL8mIQCaQGzflTCItGwvX06aAQblEzqHU99Jyif+:uW0yWYLPQ65kgX06a5ieU93nG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab07b2c322d29b3bdaf9725796b03c45
Files
-
ab07b2c322d29b3bdaf9725796b03c45.exe windows:4 windows x86 arch:x86
5380e16d5fcd524fc1ab67157baa6308
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrlenA
SetEvent
FreeLibrary
VirtualAlloc
SizeofResource
LockResource
LoadResource
FindResourceExA
GetModuleHandleA
PulseEvent
FreeResource
VirtualFree
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
GetLastError
VirtualProtect
LocalAlloc
GlobalFree
WriteFile
CreateFileA
GlobalAlloc
GetStringTypeA
LCMapStringW
Sleep
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
GetStringTypeW
TerminateProcess
HeapAlloc
HeapFree
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleFileNameA
CreateEventA
LoadLibraryW
CloseHandle
LCMapStringA
ExitProcess
user32
DrawTextA
GetClientRect
EndPaint
PostQuitMessage
CreateWindowExA
BeginPaint
DefWindowProcA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
UnregisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
GetDC
FillRect
ReleaseDC
RegisterClassA
BringWindowToTop
AttachThreadInput
MessageBoxA
EndDialog
LoadStringA
DialogBoxParamA
DestroyWindow
TranslateAcceleratorA
gdi32
GetObjectA
CreateCompatibleBitmap
SelectObject
GetDIBits
CreateCompatibleDC
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantClear
pdh
PdhGetDataSourceTimeRangeA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE