Static task
static1
Behavioral task
behavioral1
Sample
bf5dec3676883d544cc76560c48b633e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf5dec3676883d544cc76560c48b633e.exe
Resource
win10v2004-20231215-en
General
-
Target
bf5dec3676883d544cc76560c48b633e
-
Size
204KB
-
MD5
bf5dec3676883d544cc76560c48b633e
-
SHA1
d8736971ccbe91728dd280fc4f86423c94b41227
-
SHA256
c6e956a8276e9948748644d6f34af8913b202c7ef1596d2d738a430f61e75384
-
SHA512
d66dc64fe2a2940d522b588bda3a310dd923c4d634329b0b34b756f799641577a1595ad4b72b62717ddac61e72a44352163c37e6d6b82cdb1e2f472bb61b6f1a
-
SSDEEP
3072:ZJxoOvRuShdPTDIrJrsRvfDIExV1rjErEhgOHw6DyjoTwBHjN1:EadLer0X3nm7ZoyhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5dec3676883d544cc76560c48b633e
Files
-
bf5dec3676883d544cc76560c48b633e.exe windows:4 windows x86 arch:x86
7584401a6db8be962c8c659f7969c102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
FindTextA
user32
IsWindowUnicode
CharNextA
IsChild
PostQuitMessage
UnregisterClassA
PeekMessageA
GetClassInfoA
CharToOemA
CharNextW
GetKeyNameTextA
CallWindowProcA
CreatePopupMenu
GetTopWindow
ClientToScreen
DrawAnimatedRects
DrawIcon
DestroyCursor
SetParent
EnableScrollBar
SetScrollPos
ReleaseDC
SetRect
ActivateKeyboardLayout
GetCursor
OpenClipboard
InvalidateRect
FillRect
ScrollWindow
GetFocus
ChildWindowFromPoint
CharLowerBuffA
GetKeyboardLayout
SetClipboardData
SetActiveWindow
SetCapture
GetClipboardData
IsWindowVisible
DrawFrameControl
BeginPaint
GetKeyboardLayoutList
CharLowerA
GetSysColor
MsgWaitForMultipleObjects
GetForegroundWindow
LoadCursorA
DestroyIcon
IsDialogMessageA
GetMenuStringA
ReleaseCapture
ShowScrollBar
GetMenuState
IsWindowEnabled
EnumThreadWindows
CallNextHookEx
CreateIcon
SetWindowLongW
SetWindowsHookExA
GetMenuItemID
GetWindowThreadProcessId
PostMessageA
WaitMessage
SetClassLongA
GetDC
SetTimer
GetWindowDC
GetKeyboardType
IsDialogMessageW
IsWindow
MessageBeep
GetIconInfo
ShowOwnedPopups
RedrawWindow
GetClassNameA
DefWindowProcA
MessageBoxA
GetKeyboardLayoutNameA
DestroyMenu
SetWindowPos
RemovePropA
GetScrollPos
GetCapture
SetMenu
GetSystemMenu
ShowWindow
MapWindowPoints
SetScrollRange
GetParent
PeekMessageW
SendMessageW
GetKeyboardState
IntersectRect
CharUpperBuffA
EnumWindows
FindWindowA
GetWindowLongA
RegisterClipboardFormatA
SetPropA
SendMessageA
UpdateWindow
KillTimer
wsprintfA
GetSystemMetrics
GetDCEx
GetLastActivePopup
GetWindowPlacement
GetScrollInfo
GetScrollRange
TranslateMDISysAccel
GetPropA
CreateWindowExA
TranslateMessage
SetForegroundWindow
EqualRect
GetSysColorBrush
AdjustWindowRectEx
GetMenu
GetDlgItem
SetWindowPlacement
OemToCharA
GetCursorPos
DestroyWindow
IsRectEmpty
LoadIconA
InsertMenuItemA
kernel32
GetOEMCP
VirtualAlloc
ExitProcess
lstrlenA
lstrlenW
LoadLibraryA
GetProcAddress
GetLastError
GetModuleHandleA
ExitThread
LoadLibraryExA
IsBadReadPtr
Sections
.text Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ