Static task
static1
Behavioral task
behavioral1
Sample
c569cab316cecb47a3d4bc93601d5f3d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c569cab316cecb47a3d4bc93601d5f3d.exe
Resource
win10v2004-20240226-en
General
-
Target
c569cab316cecb47a3d4bc93601d5f3d
-
Size
133KB
-
MD5
c569cab316cecb47a3d4bc93601d5f3d
-
SHA1
bb5e646c773e947d272ad6e9fca6b298de9f5b30
-
SHA256
e6b51674b640e4afde804e82b048da2a4c5f28fff317d15830c3ffd135cac2bc
-
SHA512
8fdc96aa9e68c3f63375208ce5b8e478f411517fb9656ffa58b89215a7cbeab6501ae192ab9d783189b16dc50642b57d65e14d6cde83aa247ff2645b1c73d1ad
-
SSDEEP
3072:nrWHBrxjdH7EukP3fcn3n5gC+OirqKghn4rWA3s+iG9fj:n6HBr7Auv35jL42O3s+i8b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c569cab316cecb47a3d4bc93601d5f3d
Files
-
c569cab316cecb47a3d4bc93601d5f3d.exe windows:4 windows x86 arch:x86
415ab230cc2bc49085139cae29c6a4a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
TranslateMessage
CharNextA
GetDC
GetSystemMetrics
GetDesktopWindow
gdi32
SaveDC
SetTextAlign
RestoreDC
SelectPalette
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
LineTo
RectVisible
GetClipBox
SetMapMode
CreateCompatibleDC
SetStretchBltMode
GetPixel
GetObjectA
CreateFontIndirectA
GetTextMetricsA
GetStockObject
SetTextColor
DeleteDC
CreatePalette
kernel32
QueryPerformanceCounter
GetCommandLineA
lstrlenA
lstrlenW
lstrcmpA
GlobalFindAtomA
lstrcmpiA
GetModuleHandleA
VirtualAlloc
DeleteFileA
GetWindowsDirectoryA
VirtualFree
RemoveDirectoryA
GetSystemTime
RemoveDirectoryW
CopyFileA
FindClose
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE