Static task
static1
Behavioral task
behavioral1
Sample
bdffc7d1ba21eba1eb41ad2b0b95cb0f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bdffc7d1ba21eba1eb41ad2b0b95cb0f.exe
Resource
win10v2004-20231215-en
General
-
Target
bdffc7d1ba21eba1eb41ad2b0b95cb0f
-
Size
10KB
-
MD5
bdffc7d1ba21eba1eb41ad2b0b95cb0f
-
SHA1
29cc9357dad518f83d8cc2f2b55f8fb420817079
-
SHA256
35697f3b6d6afca55decaaf2048421cc427833aef1a0974f74400d155787b20f
-
SHA512
b8eda75fc7012d406dc21dc25ee10af23089a9a0e1ce2c329a194763a771c9a1adcde65b5e4c6bfa1efa7abc60e662bafd6e7c21fc874392aa3b4acdc4face33
-
SSDEEP
96:+FTfQuFMRCrvQVWW+C/Gh9cznND3bSHrdoLztoqdlEbVpIi9rHVbenSC+zQscB:6QuFQtl+ULRZ3C5J2R+zMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdffc7d1ba21eba1eb41ad2b0b95cb0f
Files
-
bdffc7d1ba21eba1eb41ad2b0b95cb0f.exe windows:4 windows x86 arch:x86
56242b2315b2d381b859ab40b3130678
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ChildWindowFromPoint
GetSysColorBrush
FillRect
DrawEdge
OffsetRect
GetSysColor
SendMessageA
DrawTextA
GetCapture
SetCapture
InvalidateRect
ReleaseCapture
CallWindowProcA
GetDlgItem
SetWindowLongA
GetDC
SetFocus
LoadCursorA
SetCursor
GetDlgItemTextA
MessageBoxA
CharLowerBuffA
SetDlgItemTextA
EndDialog
DialogBoxParamA
gdi32
SetTextColor
SelectObject
GetDeviceCaps
CreateFontA
DeleteObject
kernel32
SetFileAttributesA
lstrlenA
lstrcpynA
lstrcatA
CreateFileA
CloseHandle
CopyFileA
GetFileAttributesA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
MulDiv
lstrcmpiA
ReadFile
CreateDirectoryA
SetCurrentDirectoryA
GetLastError
WriteFile
GetSystemTimeAsFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
ExitProcess
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shlwapi
SHAutoComplete
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 957B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE