Static task
static1
Behavioral task
behavioral1
Sample
dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44.exe
Resource
win10v2004-20240226-en
General
-
Target
dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44.bin
-
Size
164KB
-
MD5
e4e1325c4ded2cd8b4487f8a16c5095b
-
SHA1
8599b0f4b49cccc1505a3aa177f922bb75340049
-
SHA256
dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44
-
SHA512
d394ad0eb3e348e228d0290bd5eb6118eaa51f69de4f4d805c65af7d08cc96f7d422ec9be243318ceab06891656632327e8d518fe03255cec9a0db64e7637fc2
-
SSDEEP
3072:5OV3k6wVvaEwCFjJdpWrjji/g7nZ1rB9vwWLaIWC1LhRB:5Ou5vaE/VUjj7DZb9YWWIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44.bin
Files
-
dbf6e09c1ee66ae22b9ede51e931e8da444b0b7eefc7817a9f220d8077ee2d44.bin.exe windows:4 windows x86 arch:x86
b45cb3f240d24775b2c7c93b362f80ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
FatalAppExitA
FindFirstChangeNotificationW
GetConsoleScreenBufferInfo
HeapFree
HeapDestroy
GlobalAlloc
user32
DrawIconEx
IsWindow
RegisterClassExW
CharUpperA
GetDlgItemTextW
GetScrollRange
GetFocus
ShowScrollBar
GetKeyState
SetClassLongW
CopyAcceleratorTableW
GetDlgCtrlID
RegisterClipboardFormatA
CopyIcon
GetTabbedTextExtentA
WinHelpA
MoveWindow
UnionRect
KillTimer
GetMenuItemCount
DrawStateA
CharLowerBuffA
GetKeyboardState
SetRectEmpty
ValidateRect
IntersectRect
GetClassInfoW
LoadBitmapW
MessageBoxA
WindowFromDC
LoadAcceleratorsA
GetMenuItemID
GetClipboardData
CharToOemA
SendNotifyMessageW
DrawIcon
msvcrt
_controlfp
log
__set_app_type
__p__fmode
__p__commode
toupper
__setusermatherr
_initterm
__getmainargs
_acmdln
ceil
_errno
_outp
Sections
.text Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ