Static task
static1
Behavioral task
behavioral1
Sample
bd6e342eb9191a6a27c4622a739ea432.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd6e342eb9191a6a27c4622a739ea432.exe
Resource
win10v2004-20240226-en
General
-
Target
bd6e342eb9191a6a27c4622a739ea432
-
Size
451KB
-
MD5
bd6e342eb9191a6a27c4622a739ea432
-
SHA1
697cff50a9a05b74e3995473fbd348ed55ff8f61
-
SHA256
91c31f45643392c16c7a3066385efc4eb47bce6f101d04325802af67baa12983
-
SHA512
57b22a06a150ea95fe91f02ed131ad67ce4b478b4e8213ec5546f75bc353e3be5235ae656215e3f47e786292f4c40a80f67692667698d27d90e9fbb7cab69fd0
-
SSDEEP
6144:o90QXgE/elHBAe76gXcdsbPOaLfEZgFMo7hx271k77fTCF1cJlvYew0SGAwY3zqs:7FE/g7NPOaEZgFLhx2D1cLC4AXqF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd6e342eb9191a6a27c4622a739ea432
Files
-
bd6e342eb9191a6a27c4622a739ea432.exe windows:4 windows x86 arch:x86
e16dbaf75ba615fa8ce994b9ebc9286d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExW
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExW
RegCreateKeyExA
gdi32
SetBkMode
SetTextColor
SetBkColor
GetDeviceCaps
GetStockObject
ole32
CoUninitialize
oleaut32
SysFreeString
VariantClear
user32
ReleaseDC
BeginPaint
FillRect
SetWindowPos
GetSystemMetrics
GetDesktopWindow
SetCapture
LoadStringA
SetWindowLongA
GetDC
ScreenToClient
MsgWaitForMultipleObjects
MessageBoxA
GetSysColor
GetSystemMenu
EnableMenuItem
PostQuitMessage
PostMessageA
GetClientRect
EnableWindow
GetParent
SendMessageA
LoadIconA
TrackPopupMenu
CallWindowProcA
IsWindowVisible
SetTimer
SetWindowTextA
DispatchMessageA
GetWindowLongA
ShowWindow
GetWindowRect
InvalidateRect
IsWindow
DefWindowProcA
UpdateWindow
EndPaint
TranslateMessage
SetCursor
SetForegroundWindow
EndDialog
CreateWindowExA
GetDlgItem
SetFocus
CheckMenuItem
PeekMessageA
kernel32
ExitProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetStdHandle
GetCurrentProcessId
HeapSize
GetEnvironmentStringsW
GetTickCount
ExpandEnvironmentStringsA
GetProcessHeap
GetModuleFileNameA
SetFilePointer
LoadLibraryExW
FindResourceW
SizeofResource
GetCurrentProcess
CreateFileA
GetThreadLocale
FormatMessageA
CompareStringW
LCMapStringA
GetLocaleInfoA
lstrlenA
GetOEMCP
GetWindowsDirectoryA
GetConsoleOutputCP
GetFileType
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetACP
SetHandleCount
GetConsoleCP
LCMapStringW
GetTempPathA
GetLastError
SetLastError
LoadLibraryW
FreeLibrary
GetFileSize
GetPrivateProfileStringA
TlsAlloc
GetModuleFileNameW
GetCurrentThreadId
GetTimeZoneInformation
FormatMessageW
VirtualQuery
TlsGetValue
GetVersion
CreateThread
TlsFree
FlushFileBuffers
LocalFree
Sleep
CloseHandle
GetVersionExA
FreeEnvironmentStringsW
TerminateProcess
FileTimeToLocalFileTime
LocalAlloc
GetSystemTimeAsFileTime
ReadFile
DeleteCriticalSection
RemoveDirectoryA
GetExitCodeProcess
lstrcpynA
WritePrivateProfileStringA
SetEndOfFile
GetStringTypeW
IsDebuggerPresent
GlobalUnlock
GetProcAddress
CreateProcessA
QueryPerformanceCounter
GetCommandLineW
VirtualFree
GetConsoleMode
LoadResource
FindResourceA
LoadLibraryA
GetModuleHandleA
FindClose
VirtualProtect
OutputDebugStringA
WriteConsoleA
VirtualAlloc
WriteFile
GetLocalTime
InitializeCriticalSection
SetStdHandle
RaiseException
EnterCriticalSection
GetModuleHandleW
GetSystemInfo
DeleteFileA
SetFileAttributesA
DeleteFileW
LeaveCriticalSection
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
CreateProcessW
HeapAlloc
GetVersionExW
GetStartupInfoA
HeapDestroy
GetCPInfo
HeapFree
MapViewOfFile
CreateFileMappingA
GetCurrentThread
ReleaseMutex
CreateFileW
InterlockedExchange
SetEvent
HeapCreate
GlobalAlloc
LoadLibraryExA
FindFirstFileW
SetUnhandledExceptionFilter
lstrcatA
GetCommandLineA
UnhandledExceptionFilter
GetStringTypeA
WriteConsoleW
HeapReAlloc
LockResource
CreateEventA
GetFileAttributesW
FindFirstFileA
SetErrorMode
GetDriveTypeA
FindNextFileW
TlsSetValue
GlobalLock
GlobalFree
GetFullPathNameA
WaitForSingleObject
UnmapViewOfFile
FindNextFileA
msvcrt
free
_controlfp
Sections
sgwee Size: 450KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE