Static task
static1
Behavioral task
behavioral1
Sample
ab2c12fa5987f34cb36a8e0899765afe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab2c12fa5987f34cb36a8e0899765afe.exe
Resource
win10v2004-20240226-en
General
-
Target
ab2c12fa5987f34cb36a8e0899765afe
-
Size
176KB
-
MD5
ab2c12fa5987f34cb36a8e0899765afe
-
SHA1
258b2e5896ad18a0467d70eac01a72114d1a3f81
-
SHA256
e07abde07e6f3d21b153fc3a81c2e006d2556c9e08d59bb18a86d12d866ef5ce
-
SHA512
a8fb58961e9716fc18e977b4dfba741cf2ca309a07ee596877c46835380df86d75a48455eea2e2743fc21aa9b6d417fe1d5dfb9f92f094cd509c03f7a23a5e1c
-
SSDEEP
3072:MNFNP2aX5fHrkftyuK8PYyWUVyKpJR3oShRhBRhi6I8dAI:MDJfHQFyjXUVyg9dd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab2c12fa5987f34cb36a8e0899765afe
Files
-
ab2c12fa5987f34cb36a8e0899765afe.exe windows:4 windows x86 arch:x86
3e8cc25cc4e8aad6c1377e51b0706a96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVISaveOptions
AVIMakeCompressedStream
advapi32
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
kernel32
WideCharToMultiByte
GetProcAddress
InitializeCriticalSection
lstrcpynW
GetThreadLocale
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InterlockedDecrement
WaitForMultipleObjectsEx
FreeLibrary
GlobalLock
GetCurrentThreadId
LeaveCriticalSection
GetVersionExW
GetProcessId
FileTimeToSystemTime
GetModuleHandleW
FindFirstFileW
FindNextChangeNotification
GetDriveTypeW
InterlockedIncrement
lstrlenA
GetModuleFileNameA
GetFullPathNameW
MulDiv
lstrlenW
FindClose
EnterCriticalSection
GlobalAlloc
CloseHandle
EnumResourceTypesA
FileTimeToLocalFileTime
GetLocaleInfoA
GlobalReAlloc
WaitForSingleObject
CreateThread
GetTickCount
ExitProcess
InterlockedExchange
GetCurrentProcessId
ResetEvent
GetACP
SetEvent
FindFirstChangeNotificationW
FindCloseChangeNotification
Sleep
GetLastError
GlobalUnlock
QueryPerformanceCounter
MultiByteToWideChar
CreateEventW
DeleteCriticalSection
GetVersionExA
ole32
CoFreeUnusedLibraries
OleInitialize
CoUninitialize
CoCreateInstance
StringFromGUID2
OleUninitialize
CoInitialize
shell32
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
DragQueryFileW
SHGetSpecialFolderLocation
SHGetFileInfoW
user32
GetSysColorBrush
IsWindowVisible
GetActiveWindow
SendMessageW
InflateRect
LoadCursorW
OffsetRect
GetCursorPos
SetRectEmpty
GetClientRect
ClientToScreen
SetTimer
ReleaseCapture
DrawTextW
SetFocus
UnionRect
CreatePopupMenu
DefWindowProcW
IntersectRect
IsRectEmpty
GetSysColor
DestroyMenu
FillRect
SetCapture
GetWindowRect
GetSystemMetrics
SetWindowLongW
FindWindowExW
LoadImageW
PostMessageW
BringWindowToTop
SetRect
FrameRect
TrackPopupMenuEx
GetParent
CopyRect
EqualRect
GetDC
KillTimer
GetDesktopWindow
ReleaseDC
ShowScrollBar
EnableWindow
DrawFocusRect
SetForegroundWindow
UpdateWindow
GetWindowLongW
wsprintfW
IsWindow
ScreenToClient
SetCursor
PtInRect
InvalidateRect
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ