Static task
static1
Behavioral task
behavioral1
Sample
abfb7af9d093d8e2af7a36f0dd7becfd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abfb7af9d093d8e2af7a36f0dd7becfd.exe
Resource
win10v2004-20240226-en
General
-
Target
abfb7af9d093d8e2af7a36f0dd7becfd
-
Size
45KB
-
MD5
abfb7af9d093d8e2af7a36f0dd7becfd
-
SHA1
b50edd7206993ff222d45b743fe697875ffe1898
-
SHA256
8c4f65f5e69ca8a327751a6dcfd405cb8766e667963794df16aa8e3b6ea70cc3
-
SHA512
9ef625dc73bac40f7314ffc64fa85fbae7457e589c61b1047e2b1f7c1f1146e45c8c424be8b618b8244621a00e4fa3ab55766ac31520c074cc738679de2ca1c0
-
SSDEEP
768:ZpwkwMnvA2t2mdkfwvKFw9FPB/qBHNRF/LfWHnODDZW:HnvA0vdkfw7E1fWHSW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abfb7af9d093d8e2af7a36f0dd7becfd
Files
-
abfb7af9d093d8e2af7a36f0dd7becfd.exe windows:4 windows x86 arch:x86
a7c8934f82136dd3b660791debe958dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowLongW
GetSysColor
GetDC
GetWindowLongW
CharUpperA
KillTimer
GetSystemMetrics
GetSysColorBrush
RegisterClipboardFormatA
TranslateMessageEx
UnregisterClassA
UnregisterClassW
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
KillTimer
SetTimer
PostMessageW
TranslateMessage
GetWindowLongW
CharUpperW
TranslateMessageEx
kernel32
VirtualProtectEx
GetSystemTimeAsFileTime
VirtualProtectEx
SleepEx
CreateFileA
VirtualProtectEx
WriteProcessMemory
GetStartupInfoA
GetSystemTimeAsFileTime
CreateProcessA
WaitForSingleObject
ReadFile
CreateFileA
VirtualProtect
CreateFileA
GetStartupInfoW
GetSystemTime
CreateProcessA
ReadProcessMemory
CreateProcessA
LoadLibraryA
WriteProcessMemory
CreateProcessA
WriteProcessMemory
ReadFile
GetStartupInfoW
GetSystemTimeAsFileTime
SleepEx
VirtualProtect
LoadLibraryExW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetBinaryTypeW
ReleaseMutex
GetSystemTimeAsFileTime
CreateFileA
GetStartupInfoA
GetStartupInfoA
SleepEx
GetStartupInfoA
TerminateProcess
ReadFile
GetStartupInfoA
ReadFile
LoadLibraryExA
WaitForSingleObject
SleepEx
GetStartupInfoA
LoadLibraryExW
WriteProcessMemory
LoadLibraryA
LoadLibraryExW
VirtualProtect
CreateProcessW
LoadLibraryExW
TerminateProcess
GetStartupInfoA
TerminateProcess
LoadLibraryA
Sleep
CreateProcessW
VirtualProtect
ReleaseMutex
Sections
.text Size: 12KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ