Static task
static1
Behavioral task
behavioral1
Sample
adc258adb12e6330f971985f1fe066b7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adc258adb12e6330f971985f1fe066b7.exe
Resource
win10v2004-20240226-en
General
-
Target
adc258adb12e6330f971985f1fe066b7
-
Size
31KB
-
MD5
adc258adb12e6330f971985f1fe066b7
-
SHA1
0b0eafeac136a854c54c8dcd665d5af330758420
-
SHA256
cb7f25e59dd6c097dd008f0de94976fafc32837d7d778666a851e9a8b3697a96
-
SHA512
7c6ae10bca18fb71962f2b46a6bd21df2b6c076f39be902b175812917adf7563f0723be359e1eecdcbe616fc8523d9e15f5c188320bc2987b67e239aa494a653
-
SSDEEP
384:uQ04rTLMPSryuktjGW8n8bO5hgebVGsStxJLbDjAArxL4dXTHJGHhyQQId1/VXCf:uQzrTHr/kA8y5h7bVeH2XTHJYdQId1M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc258adb12e6330f971985f1fe066b7
Files
-
adc258adb12e6330f971985f1fe066b7.exe windows:4 windows x86 arch:x86
b05374c869b3860eadaa7cbb4c487309
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetProcessHeap
InterlockedExchange
QueryPerformanceCounter
GetProcAddress
HeapDestroy
ReadFile
GetCurrentProcessId
LocalAlloc
HeapDestroy
GetCurrentThreadId
HeapDestroy
lstrcmpiW
MultiByteToWideChar
LeaveCriticalSection
GetVersionExA
EnterCriticalSection
GetModuleHandleA
GetModuleHandleA
HeapAlloc
DeleteCriticalSection
VirtualProtect
MultiByteToWideChar
GetModuleFileNameA
QueryPerformanceCounter
CreateFileW
VirtualAlloc
GetVersionExA
HeapDestroy
DeleteCriticalSection
GetModuleFileNameA
GetModuleFileNameA
InterlockedExchange
CloseHandle
FreeLibrary
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
DisableThreadLibraryCalls
InterlockedDecrement
lstrcmpiW
VirtualAlloc
lstrlenA
SetLastError
GetVersionExA
InterlockedExchange
lstrcmpiW
HeapAlloc
SetLastError
InterlockedExchange
LoadLibraryA
InterlockedIncrement
VirtualProtect
CreateThread
QueryPerformanceCounter
Sleep
LoadLibraryA
LeaveCriticalSection
VirtualProtect
VirtualProtect
LocalAlloc
gdi32
CreateBitmap
SetBkColor
SelectObject
SetBrushOrgEx
MoveToEx
CreateSolidBrush
GetBkColor
CreateBitmap
CreateBitmap
SetBrushOrgEx
CreateFontIndirectA
CreateCompatibleDC
CreateDIBSection
CreateDIBSection
CreateDIBitmap
SetWindowExtEx
CombineRgn
CreateRectRgn
SetBkColor
BitBlt
CreateSolidBrush
SetBkMode
CreateRectRgn
CreateSolidBrush
GetWindowOrgEx
GetBrushOrgEx
GetPixel
SelectObject
SelectObject
GetBrushOrgEx
StretchBlt
CreateDIBitmap
SetTextColor
StretchBlt
CreateRectRgn
SetBkMode
BitBlt
GetPixel
SetBkColor
CreatePen
GetWindowOrgEx
SetTextColor
LineTo
CreateCompatibleDC
BitBlt
RoundRect
Rectangle
PatBlt
BitBlt
GetBrushOrgEx
CreateDIBitmap
GetWindowExtEx
GetCurrentObject
SelectObject
Polygon
SelectObject
PatBlt
SetPixel
SetBkColor
GetWindowExtEx
CreateFontIndirectA
user32
LoadStringW
GetParent
SetWindowLongW
DispatchMessageW
BeginPaint
SetFocus
LoadCursorW
SetDlgItemTextW
GetWindowRect
SetWindowTextW
SetWindowTextW
LoadCursorW
SetWindowPos
PostMessageW
SendMessageW
TranslateMessage
GetWindowRect
TranslateMessage
DefWindowProcW
LoadCursorW
CharNextW
GetClientRect
DialogBoxParamW
ReleaseDC
TranslateMessage
SendMessageW
GetWindowLongW
SetDlgItemTextW
GetWindowRect
GetParent
EnableWindow
GetFocus
TranslateMessage
EndDialog
LoadIconW
BeginPaint
ShowWindow
SetDlgItemTextW
InvalidateRect
IsWindow
GetFocus
SetDlgItemTextW
CharNextW
BeginPaint
LoadIconW
SetDlgItemTextW
GetClientRect
GetDC
GetDlgItem
SetTimer
SetDlgItemTextW
ShowWindow
SetWindowTextW
GetWindowLongW
SetFocus
LoadIconW
GetSystemMetrics
SetTimer
GetDC
LoadCursorW
SetFocus
DefWindowProcW
DialogBoxParamW
DestroyWindow
PostMessageW
PeekMessageW
GetDC
DialogBoxParamW
PostMessageW
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ