Static task
static1
Behavioral task
behavioral1
Sample
c288a0560896ebaee1b4d9078df0ec72.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c288a0560896ebaee1b4d9078df0ec72.exe
Resource
win10v2004-20240226-en
General
-
Target
c288a0560896ebaee1b4d9078df0ec72
-
Size
111KB
-
MD5
c288a0560896ebaee1b4d9078df0ec72
-
SHA1
4131b59a560d21e1cf617108efba920d0b30579e
-
SHA256
8174fe14275a4810fe86b54c8d5691e4d2e26d9ab61a441e6688f06548ac35f8
-
SHA512
17e5ea539bcf83890eb1406e10c72c1cb8968e56b00962066a8f989a2f8cbce61de0e3128497180bbeced23518b0341854e2410260f74c1d5345edce99f471ab
-
SSDEEP
3072:oV+0mjQXleU5rPfrIHvxaSJBf9wJ+92+S7:z0mUZOvxaS/6Ji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c288a0560896ebaee1b4d9078df0ec72
Files
-
c288a0560896ebaee1b4d9078df0ec72.exe windows:4 windows x86 arch:x86
500b236a26a61c9c722ea8f2a20d4949
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
SetPixel
SaveDC
GetClipBox
GetPaletteEntries
GetPixel
GetRgnBox
RestoreDC
SetBkColor
CreateDIBitmap
user32
ReleaseDC
GetMenu
InflateRect
GetMenuStringA
DestroyCursor
DefMDIChildProcA
EnableMenuItem
EnumWindows
GetWindowTextA
AdjustWindowRectEx
SetWindowsHookExA
SetWindowLongA
GetWindowRect
PeekMessageW
GetScrollPos
SetWindowPlacement
FrameRect
SetTimer
GetWindowThreadProcessId
FindWindowA
SetMenuItemInfoA
ChildWindowFromPoint
CallWindowProcA
MsgWaitForMultipleObjects
RedrawWindow
IsWindow
SetActiveWindow
DestroyWindow
GetWindow
GetKeyboardType
CallNextHookEx
GetCapture
SetWindowLongW
IsWindowEnabled
IsWindowUnicode
PtInRect
SetPropA
DispatchMessageA
GetKeyboardLayout
TranslateMDISysAccel
GetSubMenu
ScreenToClient
CreateMenu
KillTimer
WaitMessage
GetWindowLongW
GetScrollRange
IsWindowVisible
GetMenuItemCount
SetRect
GetKeyboardLayoutList
GetFocus
RemovePropA
CreateIcon
ScrollWindow
EnumChildWindows
SetForegroundWindow
DispatchMessageW
SetScrollInfo
IntersectRect
TranslateMessage
DestroyMenu
DrawFrameControl
ShowScrollBar
SystemParametersInfoA
GetClientRect
CharToOemA
CharNextW
EmptyClipboard
DrawMenuBar
IsChild
GetKeyboardState
GetSysColorBrush
RegisterWindowMessageA
SetMenu
PostQuitMessage
GetDC
ActivateKeyboardLayout
EnableScrollBar
SetFocus
GetSysColor
GetClassLongA
OpenClipboard
CharLowerBuffA
CreatePopupMenu
MapWindowPoints
GetMenuState
ClientToScreen
InsertMenuItemA
InsertMenuA
WindowFromPoint
GetCursor
CheckMenuItem
GetActiveWindow
wsprintfA
MessageBoxA
GetKeyNameTextA
SendMessageA
UnregisterClassA
SetClipboardData
DeleteMenu
RegisterClipboardFormatA
GetCursorPos
SendMessageW
GetMenuItemInfoA
SetWindowTextA
OemToCharA
IsDialogMessageA
GetParent
GetClassInfoA
IsZoomed
ReleaseCapture
GetPropA
DrawIconEx
DefFrameProcA
LoadCursorA
SetCapture
SetWindowPos
MessageBeep
GetSystemMenu
RegisterClassA
InvalidateRect
GetDesktopWindow
OffsetRect
EndPaint
IsIconic
FillRect
BeginPaint
LoadStringA
ShowWindow
GetLastActivePopup
IsDialogMessageW
GetKeyState
UpdateWindow
GetWindowDC
DrawAnimatedRects
DefWindowProcA
SetClassLongA
DrawIcon
MapVirtualKeyA
PeekMessageA
GetDlgItem
LoadBitmapA
EnumThreadWindows
IsRectEmpty
LoadKeyboardLayoutA
ShowOwnedPopups
GetMessagePos
GetTopWindow
GetWindowLongA
PostMessageA
CharUpperBuffA
RemoveMenu
GetSystemMetrics
SetScrollPos
CreateWindowExA
GetClipboardData
MoveWindow
LoadIconA
SetParent
EnableWindow
DestroyIcon
GetForegroundWindow
GetClassNameA
SetCursor
GetKeyboardLayoutNameA
DrawTextA
GetMenuItemID
GetDCEx
UnhookWindowsHookEx
GetIconInfo
CharLowerA
DrawEdge
CharNextA
GetWindowPlacement
EqualRect
shell32
DragQueryFileA
SHGetSpecialFolderLocation
SHGetFileInfoA
Shell_NotifyIconA
version
GetFileVersionInfoSizeA
kernel32
GetFileType
GetACP
FormatMessageA
GetCommandLineA
VirtualAlloc
GetDiskFreeSpaceA
GetVersionExA
LocalAlloc
LoadResource
GetLastError
VirtualAllocEx
GetOEMCP
MoveFileA
SetErrorMode
ExitThread
GetModuleHandleA
CloseHandle
GetProcAddress
lstrcmpiA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ