Static task
static1
Behavioral task
behavioral1
Sample
031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056.exe
Resource
win10v2004-20240226-en
General
-
Target
031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056
-
Size
48KB
-
MD5
842bf15736068efd030122bff2657e73
-
SHA1
970bfe38c7ab85c62f9a4d2e57780ef28107db07
-
SHA256
031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056
-
SHA512
0e195d843071ecf18d05575fbf8828e8338416d440e488fcbb660b5be427c812718d9740496fc9315ec08853b8a9bd455a7c300979bfd4672ccdf874380687f1
-
SSDEEP
768:BgxWoMylFCG+dxPytPJHKb3tC4RHM+M/FdDXobSJa7SMFe5/Y4kcq:+7L3CG+jPuPJHUdNMhdQSYDFy3kV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056
Files
-
031db6df76276289ad760cc0734440c078b52c70c4cf0c46c0abcb8eb80f1056.exe windows:4 windows x86 arch:x86
05b2b238fd9a2c2b4ba35ecd155dbce8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetCurrentProcessId
FreeLibrary
CreateProcessInternalA
TlsSetValue
GetACP
GetSystemDefaultLCID
TlsGetValue
GetCommandLineA
GetModuleHandleW
GetCurrentThread
GetModuleFileNameA
GetLogicalDrives
GetOEMCP
GetDriveTypeW
lstrcatA
lstrcmpA
IsDBCSLeadByte
GetCurrentThreadId
TlsFree
VirtualAlloc
user32
ReleaseDC
GetWindowLongA
GetActiveWindow
GetWindowTextLengthA
GetDC
ShowWindow
GetWindowDC
GetFocus
CloseWindow
GetClassLongA
UpdateWindow
BeginPaint
GetSystemMetrics
IsIconic
GetForegroundWindow
IsWindowVisible
RegisterClassA
GetWindowTextA
GetWindow
imagehlp
ImageLoad
FindFileInPath
FindDebugInfoFile
ImageNtHeader
CheckSumMappedFile
BindImage
oleacc
LresultFromObject
GetRoleTextA
DllGetClassObject
GetStateTextA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ