Static task
static1
Behavioral task
behavioral1
Sample
b81045b99f9f29d01f4adee6dd69c9a8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b81045b99f9f29d01f4adee6dd69c9a8.exe
Resource
win10v2004-20240226-en
General
-
Target
b81045b99f9f29d01f4adee6dd69c9a8
-
Size
207KB
-
MD5
b81045b99f9f29d01f4adee6dd69c9a8
-
SHA1
4338269091f84eb2b06c7be91af3bd2f18dd172e
-
SHA256
1763cee192d573f22da90d03f7f5e424059ef8baba2732d68f0ae51bc6ceb6f7
-
SHA512
b361fbb1c18c8b8dd7cc7cfa42df623b4d75df8c5f002a701aced4e35fa879cac8df495f4b0c205f9ec8cda1b0d4328b5aed9ddd81e1a1ead9c92cbb36ffe261
-
SSDEEP
3072:b5mPAvOmqpS04NRFeEsMRJdAgp0xLBTDi7fh14R/txis:b5pGxpR49sw2BT+7ER/tx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b81045b99f9f29d01f4adee6dd69c9a8
Files
-
b81045b99f9f29d01f4adee6dd69c9a8.exe windows:1 windows x86 arch:x86
6a389b55c930843e792ece660e5bffd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
InterlockedIncrement
SetThreadAffinityMask
GetModuleHandleA
UnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateFileA
RaiseException
InitializeCriticalSection
EnterCriticalSection
GetVersion
GlobalAddAtomW
GetStartupInfoA
GetConsoleMode
GetCurrentThreadId
user32
RedrawWindow
ClientToScreen
GetClassLongA
EndDialog
GetMenuItemCount
UnionRect
TrackPopupMenu
SetUserObjectSecurity
DialogBoxIndirectParamA
GetClassNameA
SetFocus
DialogBoxParamA
IsWindowVisible
SetWindowTextA
DefMDIChildProcA
msvcrt
_ltow
_XcptFilter
__setusermatherr
_safe_fprem
__set_app_type
__getmainargs
__p__fmode
_spawnl
_global_unwind2
_ismbbpunct
_wspawnve
_controlfp
_exit
__p__commode
_locking
exit
_putenv
_acmdln
memcpy
_fcvt
_except_handler3
_strdup
_wcmdln
_adjust_fdiv
wcsncat
_mbspbrk
strtoul
_cexit
_fdopen
_wsearchenv
_ismbclower
_creat
_initterm
gdi32
Polyline
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
SetTextAlign
CreatePen
StartDocA
SaveDC
DeleteObject
CreateDIBSection
EndPage
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ