Static task
static1
Behavioral task
behavioral1
Sample
adb71971ba68f782d0b979ceef4f3b29.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
adb71971ba68f782d0b979ceef4f3b29.exe
Resource
win10v2004-20240226-en
General
-
Target
adb71971ba68f782d0b979ceef4f3b29
-
Size
46KB
-
MD5
adb71971ba68f782d0b979ceef4f3b29
-
SHA1
816c7a4672eadc4787313bb95ac13f304bcce49c
-
SHA256
aa62d2de5bfb4d1d0e929317172914ede92866c9e79d4f4ee3628a0ef3469504
-
SHA512
163da83d1971c9d4ead47fd41f85e17c18a49fe55d2cbc2e67c901b03650c69a4813428abc15bc830658a61f1adcf8b0f3844516162adc287f0ed850dfd2e20d
-
SSDEEP
768:w5m0zu5jr7z5ZZ3TCrzk4GOjxk1zee7/bJuSJo0xjcWIqdv4YKUnNEMSo96wQ0vn:DDdfxWrzZHq1zTzJcm4YK2NEG96wQ04O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adb71971ba68f782d0b979ceef4f3b29
Files
-
adb71971ba68f782d0b979ceef4f3b29.exe windows:5 windows x86 arch:x86
5e83c9e74f59280b918d6cdccb182015
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
GetDlgItemTextA
SendMessageW
LoadCursorW
GetWindowLongW
GetClassNameW
GetMessageA
GetWindowTextW
MsgWaitForMultipleObjects
GetMessageW
GetWindowThreadProcessId
GetClipboardData
PeekMessageA
GetIconInfo
CloseDesktop
OpenWindowStationA
GetCursorPos
GetDlgItemTextW
FindWindowExW
PeekMessageW
GetForegroundWindow
SetThreadDesktop
SetProcessWindowStation
DispatchMessageW
GetKeyState
OpenDesktopA
CharLowerBuffA
CloseWindowStation
ExitWindowsEx
GetKeyboardState
GetDlgItem
ToUnicode
DrawIcon
kernel32
ReadFile
CreateMutexW
WaitForSingleObject
SetEvent
GetSystemTime
GetTimeZoneInformation
LeaveCriticalSection
ExpandEnvironmentStringsW
GetThreadPriority
GetExitCodeProcess
lstrlenW
GetFileSize
GetCurrentProcessId
lstrcmpiW
MoveFileExW
CloseHandle
FindNextFileW
MapViewOfFile
IsBadReadPtr
GlobalLock
HeapReAlloc
HeapAlloc
UnmapViewOfFile
CreateDirectoryW
GetLogicalDrives
CreateEventW
Sleep
ReleaseMutex
GetCurrentThreadId
SetFileAttributesW
GetProcessHeap
FindResourceW
HeapFree
GetSystemTimeAsFileTime
GetVersionExW
GetTickCount
SetFileTime
InitializeCriticalSection
SystemTimeToFileTime
SetThreadPriority
GetFileSizeEx
GetModuleFileNameA
GetLastError
lstrcmpiA
GetDriveTypeW
CreateFileMappingW
GetTempPathW
lstrlenA
GetCommandLineA
DeleteFileW
CopyFileW
lstrcpyA
GetModuleFileNameW
CreateThread
GetComputerNameW
SetFilePointer
WriteFile
SetLastError
Sections
.apun Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bmh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kjwb Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ