Static task
static1
Behavioral task
behavioral1
Sample
b6752c9be383d2650a0885d83442ee0b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6752c9be383d2650a0885d83442ee0b.exe
Resource
win10v2004-20240226-en
General
-
Target
b6752c9be383d2650a0885d83442ee0b
-
Size
294KB
-
MD5
b6752c9be383d2650a0885d83442ee0b
-
SHA1
2ff8ad85176df968d740eb3b4f681e0a158bf45e
-
SHA256
bb0c41d8fef1d4943ae032d781e9b3987d24ebfc40fbb1266155d3d5d69f6749
-
SHA512
bd7357b5e51e1f9f3cab8db93d476e4e4e2d9787a4ba2002363c27650cb4741f6d272eef9fc223abfe52533bd3a43bb52b6952e672f92d89c389078f194c48d2
-
SSDEEP
6144:6u+9V8DGub7wq9Gs9SOBAQ54Gya7SXz51JDjErSQq:6j63L9P4vQ54GyaSzfZE+Qq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6752c9be383d2650a0885d83442ee0b
Files
-
b6752c9be383d2650a0885d83442ee0b.exe windows:4 windows x86 arch:x86
a357e2d99d20ce8844fac341e6c8e87b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
EqualRect
GetCapture
ActivateKeyboardLayout
GetCursor
MsgWaitForMultipleObjects
SetMenuItemInfoA
ReleaseCapture
IsWindowUnicode
ShowOwnedPopups
CharLowerA
FindWindowA
GetWindowDC
IsWindowVisible
DefMDIChildProcA
PeekMessageW
GetClassLongA
SetWindowLongA
GetKeyboardLayout
EmptyClipboard
IsRectEmpty
CreateWindowExA
IsDialogMessageW
SetWindowPlacement
InflateRect
TrackPopupMenu
IntersectRect
WindowFromPoint
FrameRect
DrawMenuBar
SetParent
GetActiveWindow
wsprintfA
LoadCursorA
CharToOemA
RegisterClassA
ChildWindowFromPoint
GetPropA
TranslateMessage
RemovePropA
GetWindowRect
DefFrameProcA
GetWindow
IsIconic
GetDesktopWindow
GetSystemMenu
OpenClipboard
EndPaint
SetRect
GetClipboardData
EnableMenuItem
IsZoomed
GetMenuItemID
GetMessagePos
GetLastActivePopup
GetParent
EnableWindow
GetMenuState
GetSysColor
SendMessageA
CharLowerBuffA
LoadStringA
RegisterWindowMessageA
ScrollWindow
GetWindowLongA
DispatchMessageA
DrawTextA
SetMenu
GetWindowTextA
SystemParametersInfoA
DefWindowProcA
GetDCEx
ShowWindow
SetActiveWindow
CharNextW
EnumThreadWindows
UnhookWindowsHookEx
DrawEdge
DestroyCursor
InvalidateRect
GetMenuItemCount
CreateMenu
SetClassLongA
SetScrollPos
InsertMenuItemA
MessageBeep
SetCapture
ClientToScreen
RegisterClipboardFormatA
CheckMenuItem
DrawAnimatedRects
GetIconInfo
PostQuitMessage
GetClassInfoA
GetKeyboardLayoutList
UnregisterClassA
GetForegroundWindow
LoadKeyboardLayoutA
CharUpperBuffA
CreatePopupMenu
OemToCharA
GetClientRect
IsChild
SetScrollInfo
GetScrollPos
IsWindowEnabled
SetWindowLongW
PeekMessageA
LoadBitmapA
CallNextHookEx
RedrawWindow
DestroyMenu
GetKeyState
FillRect
GetDlgItem
TranslateMDISysAccel
DeleteMenu
RemoveMenu
IsWindow
GetMenu
MapVirtualKeyA
EnumChildWindows
SetCursor
IsDialogMessageA
kernel32
LoadLibraryExA
GetProcAddress
GetVersion
LoadLibraryA
WideCharToMultiByte
lstrlenA
FreeResource
VirtualAlloc
ExitProcess
DeleteFileA
WriteFile
LocalAlloc
GetModuleHandleA
lstrcmpA
ExitThread
GetFileAttributesA
GlobalAlloc
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 891B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ