Static task
static1
Behavioral task
behavioral1
Sample
bdf8e5eb9175adb88150ce7ccb1032e3.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bdf8e5eb9175adb88150ce7ccb1032e3.exe
Resource
win10v2004-20240226-en
General
-
Target
bdf8e5eb9175adb88150ce7ccb1032e3
-
Size
330KB
-
MD5
bdf8e5eb9175adb88150ce7ccb1032e3
-
SHA1
d9a8fddbc647402b09e8b861a41ac7a0bfa08d9f
-
SHA256
e6e9da05a5249c7bcd4aecfd49b6f594917461f7e035ba241849c7dddfdb518d
-
SHA512
6afb1e9f6a1c31e091ad05acdbde9ba9928f23146f9fee91759b5162db3228b737a8206048ecf9bc53318e268b2a4e67e5985a4fc86dde774b17b5377c4703a0
-
SSDEEP
6144:NetJKXzL5vOTiIIWPkHHScTXuXY6ZzIqQFM1TAP4ClREfJo4SKb3gxqF7/:cPKNOT5PmDIpZsqNNAP4ClREZNb3Oq1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf8e5eb9175adb88150ce7ccb1032e3
Files
-
bdf8e5eb9175adb88150ce7ccb1032e3.exe windows:4 windows x86 arch:x86
f2b5fd1e6ee4410649079a4ead5da72b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
WaitForSingleObject
GetModuleHandleA
LoadLibraryExA
lstrlenA
SuspendThread
GetCommandLineA
GetTickCount
HeapReAlloc
GetVersion
GetSystemDefaultLangID
CloseHandle
SetConsoleCP
InterlockedExchange
WaitForMultipleObjects
HeapCreate
GetConsoleCP
GlobalUnlock
GetAtomNameA
VirtualProtect
GetStdHandle
user32
DrawCaption
InsertMenuA
SetPropA
GetKeyState
CopyImage
DestroyMenu
CreateMenu
DragObject
InvertRect
DialogBoxParamA
FillRect
GetCursorInfo
FindWindowA
GetKeyboardLayout
CreateIcon
DispatchMessageA
SetWindowPos
SetScrollInfo
EnableScrollBar
IsDialogMessage
GetDlgItem
advapi32
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ