Static task
static1
Behavioral task
behavioral1
Sample
c17213817f532acd2f8786cfaafbde21.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c17213817f532acd2f8786cfaafbde21.exe
Resource
win10v2004-20240226-en
General
-
Target
c17213817f532acd2f8786cfaafbde21
-
Size
228KB
-
MD5
c17213817f532acd2f8786cfaafbde21
-
SHA1
f34a808e161e63b8749348e643119239f8678efb
-
SHA256
10bd9fc7fc6124d275be30504b63644a7cd684954c475f1a39e3629aee5f6ae5
-
SHA512
ee8d240732de8a6e7114f3483236515532b625313324a7275e5b511ccb4a322036519643bd794009cba431ea4fdc6573488cc487da51d37e58ab163d16cecb60
-
SSDEEP
6144:vAEFp3cbg4NYvu+6XzdZ8EelHg0Qkk53gv6v4:Tzsbg8UuLXBpexg0QzDv4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c17213817f532acd2f8786cfaafbde21
Files
-
c17213817f532acd2f8786cfaafbde21.exe windows:4 windows x86 arch:x86
8ea89b4928d77eb1ccb079386d694d34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
AllocConsole
BuildCommDCBW
DeleteFileA
DeviceIoControl
EnumResourceLanguagesA
ExitProcess
FatalExit
FindAtomA
GetCPInfo
GetCalendarInfoW
GetDefaultCommConfigW
GetModuleFileNameW
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetSystemTime
GetTimeFormatA
Heap32ListNext
LocalHandle
OpenFileMappingA
ReadConsoleOutputCharacterW
ReleaseSemaphore
SetConsoleScreenBufferSize
SetEndOfFile
SetLocaleInfoA
WriteConsoleW
_lread
lstrcatA
lstrcpyn
lstrcpynW
user32
AppendMenuW
CallMsgFilterW
CharToOemBuffA
CreateIconIndirect
CreateMDIWindowW
DdeAbandonTransaction
DdeClientTransaction
DlgDirListW
DrawAnimatedRects
DrawCaptionTempW
EnableMenuItem
EndMenu
EnumClipboardFormats
GetComboBoxInfo
GetDialogBaseUnits
GetFocus
GetKeyboardLayoutList
GetMenuStringA
GetMenuStringW
GetOpenClipboardWindow
GetScrollBarInfo
InvertRect
MonitorFromWindow
RegisterClassW
SetWindowRgn
WINNLSGetEnableStatus
gdi32
BeginPath
CopyMetaFileA
CreateBitmap
CreateHatchBrush
DeleteObject
EnumEnhMetaFile
EnumICMProfilesA
EnumMetaFile
FloodFill
GdiPlayScript
GetCharWidth32W
GetCharWidthFloatA
GetCurrentPositionEx
GetEnhMetaFileHeader
GetKerningPairs
GetObjectType
GetPixel
GetWinMetaFileBits
GetWorldTransform
PaintRgn
PlayEnhMetaFile
PlgBlt
ResetDCW
SaveDC
SetMetaFileBitsEx
SetROP2
SetTextCharacterExtra
SetWorldTransform
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ