Static task
static1
Behavioral task
behavioral1
Sample
b71651ef52a8784cf57d189cb420043f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b71651ef52a8784cf57d189cb420043f.exe
Resource
win10v2004-20240226-en
General
-
Target
b71651ef52a8784cf57d189cb420043f
-
Size
40KB
-
MD5
b71651ef52a8784cf57d189cb420043f
-
SHA1
ff044f3aeb579405bd7ca0480b47c47aa170f398
-
SHA256
c1bdc0d2ff4e7474b7fd2a04e5a0607d18ba176423161d4ff95f2f2c7d8e5abf
-
SHA512
cd89cccdc4f70560f2269140c06e24f312489882542d0ba3372403be70b77733c12b249eaf85bf31b7cb95dca7ec60c314fb2cf6b3df9e1671ba229e5949c54e
-
SSDEEP
384:eTFCB6dIl+80GKaa9AXIxUPf4x3/hTZk67Joy:oUBJl+80ValTPk3pD9o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71651ef52a8784cf57d189cb420043f
Files
-
b71651ef52a8784cf57d189cb420043f.exe windows:4 windows x86 arch:x86
11a0438be2bdac85f985432f6797c3df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DrawTextA
AlignRects
AppendMenuW
GetCursor
CalcMenuBar
CreateIcon
GetFocus
GetWindowTextLengthA
CopyRect
CopyImage
InsertMenuA
EndDialog
CloseWindow
DialogBoxParamW
DialogBoxParamA
IsMenu
AppendMenuA
LoadCursorA
LoadMenuA
kernel32
Sleep
FindAtomA
CopyFileW
CopyFileA
OpenFileMappingA
CreateDirectoryA
FindFirstFileA
CopyFileExA
DeleteFileW
ExitThread
DeleteFileA
CopyFileExW
GetCommandLineA
ReadConsoleA
GlobalFree
GetLastError
GetStdHandle
SetLastError
GetComputerNameA
gdi32
BitBlt
DeleteObject
GetBitmapBits
CancelDC
GetPixel
AddFontResourceTracking
BeginPath
GetBrushOrgEx
AbortPath
CopyMetaFileA
GetClipBox
ExcludeClipRect
GetCurrentPositionEx
AddFontResourceA
DeleteDC
ExtTextOutA
ClearBrushAttributes
advapi32
RegQueryValueA
RegEnumKeyExW
RegLoadKeyW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegReplaceKeyA
RegQueryInfoKeyW
RegDeleteKeyW
RegLoadKeyA
RegCreateKeyExA
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExW
RegQueryValueW
RegFlushKey
RegEnumKeyW
comctl32
ImageList_AddMasked
InitCommonControls
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_DragEnter
ImageList_Create
ImageList_Replace
ImageList_Copy
ImageList_LoadImageA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ