Static task
static1
Behavioral task
behavioral1
Sample
c269a882bcc4bba33ffbb3fa21c810b7.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c269a882bcc4bba33ffbb3fa21c810b7.exe
Resource
win10v2004-20240226-en
General
-
Target
c269a882bcc4bba33ffbb3fa21c810b7
-
Size
156KB
-
MD5
c269a882bcc4bba33ffbb3fa21c810b7
-
SHA1
e2e4289b58a961c9c35ded8b19b8e76285237314
-
SHA256
d0055997295ea1b192815c0a8f42ffec03e3679755d383d39ddbf07085de52f9
-
SHA512
2570baea1fc9323d6f460528da02bd585f2e34dcc84edd5569d73b32d6c04509c6ef6726aecc4de26eb9a6c7c65efb19c22ce7578695be55cb781485fe0b96bb
-
SSDEEP
3072:HlGgmBam7n5lOYxKeJwjIdTc9sqsJyAK2kWA+HApqJIynv:FGdv75LqiRqswAK2S+L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c269a882bcc4bba33ffbb3fa21c810b7
Files
-
c269a882bcc4bba33ffbb3fa21c810b7.exe windows:4 windows x86 arch:x86
6d9e50a354471337a57e63ca0447cd40
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFilePointer
WriteFile
SetConsoleMode
TerminateProcess
GetLastError
GetModuleHandleW
GetProcessHeap
LocalFree
LocalAlloc
GetModuleHandleA
GetStartupInfoA
user32
SetWindowLongW
GetDlgItem
GetScrollPos
CallWindowProcW
IsWindow
EndPaint
ScreenToClient
GetParent
MapVirtualKeyA
GetKeyNameTextW
AppendMenuA
CallWindowProcA
GetMessageA
GetWindowLongA
TrackPopupMenu
GetCursorPos
AppendMenuW
CreatePopupMenu
DrawFrameControl
FillRect
GetSysColorBrush
GetActiveWindow
InflateRect
ClientToScreen
InsertMenuItemW
IntersectRect
CreateMenu
GetPropA
LoadCursorA
EnableWindow
RegisterClassExW
SetWindowsHookExW
GetWindow
msvcrt
_onexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
malloc
free
fopen
fseek
fputs
fwrite
fclose
atoi
wcslen
__dllonexit
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ