Static task
static1
Behavioral task
behavioral1
Sample
b55d0d6d7540d9e40d39c0467bc09636.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b55d0d6d7540d9e40d39c0467bc09636.exe
Resource
win10v2004-20240226-en
General
-
Target
b55d0d6d7540d9e40d39c0467bc09636
-
Size
109KB
-
MD5
b55d0d6d7540d9e40d39c0467bc09636
-
SHA1
cad346bb6448ddefa1e6d9183b13e2e8efe1efa9
-
SHA256
cb619cb3e3c14bd17c275d81f51f5a3b300bcebc38ff2f3d82d57cc1337d2ab0
-
SHA512
fbcfbf6f885614b9b2d2121cc26973aa6bd98b5e2e0f879c511ce948da36250cdab7d0a8a763e6a44b5145de03d83f2448249a3f7cc3ecd73ab73168025eb863
-
SSDEEP
1536:Qsd7ifkN4uThBVvh83yur2kiGtqiBZ2GmKpeUVsZk0/j90jjQvE:ldefzut29xi7iBYXKwK30SoM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b55d0d6d7540d9e40d39c0467bc09636
Files
-
b55d0d6d7540d9e40d39c0467bc09636.exe windows:4 windows x86 arch:x86
4b75aa10c44def323f9ada5b67828312
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetTimeFormatW
Beep
CreateWaitableTimerW
ExpandEnvironmentStringsW
FreeLibrary
GetCurrentDirectoryW
FatalAppExitW
GetOEMCP
DeleteFileA
GetSystemTime
GetLocaleInfoA
ChangeTimerQueueTimer
GetProfileStringW
TlsGetValue
GetCurrentProcessId
WaitForMultipleObjectsEx
GetComputerNameA
CreateNamedPipeW
CreatePipe
VirtualAllocEx
GetUserDefaultLCID
DeactivateActCtx
_lclose
GetComputerNameExW
GetStartupInfoA
GetNumberFormatA
FatalAppExitA
WaitForSingleObjectEx
GetVersionExW
user32
SendMessageW
ShowWindow
GetDlgItemTextA
LoadStringA
DialogBoxParamW
SetForegroundWindow
CharPrevW
SetTimer
LockWindowUpdate
SetDlgItemInt
LoadIconA
SetDlgItemTextW
CharNextA
DispatchMessageA
wsprintfA
CreateWindowExA
IsWindow
LoadStringW
CharPrevA
BeginPaint
TranslateMessage
PeekMessageW
SetWindowTextW
CharPrevExA
InvalidateRect
PostQuitMessage
GetWindowLongA
SendDlgItemMessageW
SetDlgItemTextA
SetWindowTextA
GetClientRect
CreateWindowExA
SetWindowLongW
gdi32
GetPixel
CreateDCW
GetTextMetricsA
RoundRect
GetTextAlign
GetStockObject
GetStretchBltMode
OffsetRgn
SetRectRgn
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ