Static task
static1
Behavioral task
behavioral1
Sample
ad40be20a7c14b63e21abea0a5c209b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad40be20a7c14b63e21abea0a5c209b1.exe
Resource
win10v2004-20240226-en
General
-
Target
ad40be20a7c14b63e21abea0a5c209b1
-
Size
119KB
-
MD5
ad40be20a7c14b63e21abea0a5c209b1
-
SHA1
a91e8b538df8504d63849f0b95362015aebd17ef
-
SHA256
5f85b586eba7c5c956b83294ee0fb8af8b79ccc982d46b813bfb536264006ccb
-
SHA512
2984e452a0bcb305997bfbf5586a5cb523eec93d3ce9b7476e29b75e32fa6ed397c3745ee105d908c3d18815372616eb79bb815fb25f0bcacd599d147243698b
-
SSDEEP
3072:MZXVy7rbmnSWIdavxaliPZDpJWKF1azrmM:rzOFI0MYPZVJt1K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad40be20a7c14b63e21abea0a5c209b1
Files
-
ad40be20a7c14b63e21abea0a5c209b1.exe windows:4 windows x86 arch:x86
d8ffeb911207d9c81ca82ad8a649eaf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassA
SetScrollInfo
ScrollWindowEx
EndPaint
BeginPaint
ShowCaret
CreateCaret
DestroyCaret
GetKeyState
InvalidateRect
CharLowerA
SetCaretPos
HideCaret
GetClipboardData
SetCursorPos
ScreenToClient
GetDlgItemInt
RegisterClassExA
CallWindowProcA
GetDlgCtrlID
GetWindowTextA
GetParent
IsDlgButtonChecked
DestroyWindow
EnableWindow
CreateDialogParamA
CharUpperA
CharUpperBuffA
CheckDlgButton
EndDialog
MessageBeep
DialogBoxParamA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetDlgItemTextA
RegisterClipboardFormatA
LoadMenuA
ModifyMenuA
TrackPopupMenuEx
DestroyMenu
GetClientRect
IntersectRect
GetWindowRect
MapWindowPoints
DrawAnimatedRects
KillTimer
GetDoubleClickTime
SetTimer
wsprintfA
MessageBoxA
PeekMessageA
IsDialogMessageA
GetWindow
LoadStringA
CharNextA
FindWindowA
GetLastActivePopup
BringWindowToTop
SetForegroundWindow
LoadAcceleratorsA
TranslateAcceleratorA
TranslateMessage
GetSysColor
DestroyIcon
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ClientToScreen
SetCursor
ShowCursor
IsIconic
GetWindowLongA
SetCapture
DispatchMessageA
GetDlgItem
SendDlgItemMessageA
MoveWindow
SetWindowTextA
SetWindowPos
GetMessagePos
GetMessageA
ReleaseCapture
SetWindowLongA
GetMenuItemInfoA
EnableMenuItem
GetMenuItemID
InsertMenuA
SetMenuDefaultItem
CheckMenuItem
PostMessageA
WinHelpA
GetWindowPlacement
PostQuitMessage
GetMenu
GetSubMenu
DeleteMenu
DefWindowProcA
SetFocus
UpdateWindow
SendMessageA
GetSystemMetrics
GetDC
ReleaseDC
CreateWindowExA
SetWindowPlacement
ShowWindow
LoadIconA
LoadCursorA
LoadImageA
GetDlgItemTextA
IsClipboardFormatAvailable
CheckRadioButton
kernel32
LocalFree
GetComputerNameA
LocalAlloc
GetLastError
WriteFile
CreateFileA
ReadFile
OpenFile
GetFileSize
CloseHandle
lstrcmpA
lstrcatA
GlobalAlloc
GlobalLock
RtlMoveMemory
GlobalUnlock
GetProcessHeap
lstrcmpiA
lstrlenA
lstrcpyA
FormatMessageA
GetCommandLineA
GetModuleHandleA
ExitProcess
gdi32
SetTextColor
StartPage
TextOutA
SetAbortProc
StartDocA
EndPage
EndDoc
AbortDoc
DeleteDC
SetBkColor
GetDeviceCaps
ExtTextOutA
CreateFontIndirectA
GetTextMetricsA
CreateBitmap
CreatePatternBrush
ExcludeClipRect
SelectClipRgn
PatBlt
SelectObject
DeleteObject
shell32
ord195
SHBrowseForFolderA
ord48
DragFinish
ShellAboutA
DragQueryFileA
comctl32
ord355
ord340
ord334
ord338
ord234
ord337
ord329
ord351
ord350
ImageList_SetBkColor
ImageList_Create
ImageList_ReplaceIcon
ord4
ord2
ImageList_Destroy
ord6
advapi32
RegConnectRegistryA
RegSetValueA
RegFlushKey
RegDeleteValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegSetValueExA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
comdlg32
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ