Static task
static1
Behavioral task
behavioral1
Sample
baa4bf1d88e15a70a84936c364c35da6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
baa4bf1d88e15a70a84936c364c35da6.exe
Resource
win10v2004-20240226-en
General
-
Target
baa4bf1d88e15a70a84936c364c35da6
-
Size
212KB
-
MD5
baa4bf1d88e15a70a84936c364c35da6
-
SHA1
fb5727997c2469d30281b69573be4a466e81a651
-
SHA256
45940d8b8a263b3d0e9a3f8b10b90447f18ebe16493334c52f01cc8c11bd5678
-
SHA512
435a55530b4f32a859006513ee53ed0fb46ec680a7945012142c56c21641dfc5de79b4c46a36327dc12c913509182eef75e3898aa8a9da018f00fb66c53a6e88
-
SSDEEP
3072:hGTjHV36WQ3DzWYzeMMo250rF0PyRnktebnEfPljg1rJ56pUAasE26bGEKKRbmVM:kTj1KW+veMbrF03t+qPlje56iPp2Hc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa4bf1d88e15a70a84936c364c35da6
Files
-
baa4bf1d88e15a70a84936c364c35da6.exe windows:4 windows x86 arch:x86
57cba786f1abbf2344cbdf1d5878cbe6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
GetForegroundWindow
PostQuitMessage
GetWindow
DefWindowProcA
GetWindowLongA
SetFocus
SendDlgItemMessageA
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
UnionRect
GetClassNameA
EqualRect
UpdateWindow
IsRectEmpty
GetUpdateRect
IsWindowVisible
EnumWindows
KillTimer
GetDesktopWindow
MessageBoxA
InvalidateRect
EndPaint
SetWindowLongA
SetClassWord
GetClientRect
MoveWindow
DialogBoxParamA
LoadIconA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowPos
CreateWindowExA
PostMessageA
FindWindowA
GetDC
ReleaseDC
SetRectEmpty
IntersectRect
SetRect
OffsetRect
CopyRect
FillRect
GetAsyncKeyState
BeginPaint
EndDialog
PtInRect
LoadCursorA
GetCursorPos
SetTimer
SetCursor
DestroyCursor
IsWindow
GetWindowRect
DestroyWindow
gdi32
DeleteObject
CreateRectRgnIndirect
SetRectRgn
SelectClipRgn
CreateSolidBrush
GetStockObject
SetBkMode
TextOutA
SetTextColor
CreateFontIndirectA
RealizePalette
GetTextExtentPoint32A
GetObjectA
DeleteDC
SelectPalette
BitBlt
SetMapMode
SetBkColor
CreateCompatibleBitmap
CreateBitmap
GetMapMode
CreateCompatibleDC
CreatePalette
GetPixel
CreateDIBitmap
GetDeviceCaps
SelectObject
winmm
mciSendCommandA
kernel32
IsBadWritePtr
VirtualFree
WriteFile
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
IsBadCodePtr
VirtualAlloc
HeapReAlloc
GetCPInfo
IsBadReadPtr
GetACP
GetProcAddress
LoadLibraryA
GetLastError
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
MulDiv
GlobalFree
GetOEMCP
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStringsW
SizeofResource
FindResourceA
GetTickCount
GlobalAlloc
WinExec
LocalFree
LocalUnlock
LocalLock
LocalAlloc
_lclose
GlobalReAlloc
OpenFile
GetTempFileNameA
GetTempPathA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
CloseHandle
UnmapViewOfFile
ReadFile
FreeResource
WideCharToMultiByte
GetEnvironmentStrings
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetVersion
GetCommandLineA
GetModuleHandleA
RtlUnwind
LockResource
LoadResource
GlobalUnlock
GlobalLock
SetStdHandle
DeleteFileA
HeapSize
SetEndOfFile
comdlg32
GetSaveFileNameA
shell32
ShellExecuteA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_MEM_EXECUTE