Static task
static1
Behavioral task
behavioral1
Sample
ca4559f9c644276f6879e3effdcb0c91.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca4559f9c644276f6879e3effdcb0c91.exe
Resource
win10v2004-20240226-en
General
-
Target
ca4559f9c644276f6879e3effdcb0c91
-
Size
120KB
-
MD5
ca4559f9c644276f6879e3effdcb0c91
-
SHA1
ae27e5d380c95a0627d5ec1a791868c107188f43
-
SHA256
63ecbaa36fc9154874514088eb12d6d6283add716a62c9cbe0645cd4a072fca4
-
SHA512
776198ed3c5d7a7be307825541fa12e171a6772d3ada81ff764d44d62fde635f2f243cf799ee5d6f4fbf77f211863ab7da6cde7a5443f41aa2fdedba4d8bdb1c
-
SSDEEP
1536:X5SvBbjhEcYr0p88Ccky5S3hdwFl53GZJd8BHDAh70k+8t62vsWpmYm9iDg:QEpskmCKFHXHDAKb2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca4559f9c644276f6879e3effdcb0c91
Files
-
ca4559f9c644276f6879e3effdcb0c91.exe windows:4 windows x86 arch:x86
fbde029a7189231836eb3a52873bc0a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comctl32
ImageList_Destroy
ImageList_LoadImage
ImageList_EndDrag
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_DragMove
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_Merge
ImageList_Remove
ImageList_AddIcon
ImageList_GetIconSize
ImageList_Replace
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_ReplaceIcon
ImageList_Draw
gdi32
GetDCOrgEx
CancelDC
ClearBitmapAttributes
AbortPath
ClearBrushAttributes
DeleteDC
GetPixel
CreateSolidBrush
GetClipBox
AddFontResourceW
AddFontMemResourceEx
GetBrushOrgEx
CloseMetaFile
AddFontResourceTracking
RestoreDC
AddFontResourceA
AddFontResourceExW
RestoreDC
AddFontResourceExW
ExcludeClipRect
GetPixel
ClearBitmapAttributes
AddFontMemResourceEx
AddFontResourceTracking
ExtTextOutA
DeleteDC
BitBlt
GetCurrentPositionEx
GetDCOrgEx
AddFontResourceA
SetTextColor
GetClipBox
DeleteObject
AddFontResourceW
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
DeleteDC
AddFontResourceTracking
CloseMetaFile
GetBrushOrgEx
ExcludeClipRect
ClearBrushAttributes
AddFontResourceW
CopyMetaFileA
GetCurrentPositionEx
DeleteDC
GetPixel
ClearBitmapAttributes
CopyMetaFileA
AddFontResourceExW
BitBlt
AddFontMemResourceEx
CloseMetaFile
AddFontResourceW
AddFontResourceA
GetBrushOrgEx
GetClipBox
RestoreDC
ExtTextOutA
ExcludeClipRect
AddFontResourceTracking
AddFontResourceW
CloseMetaFile
ExcludeClipRect
CloseFigure
ExtTextOutA
AddFontResourceExA
DeleteObject
CopyMetaFileA
GetBrushOrgEx
SetTextColor
GetBitmapBits
CancelDC
GetPixel
advapi32
RegEnumValueW
RegOpenKeyExW
RegDeleteValueA
RegQueryValueExA
RegQueryValueA
RegLoadKeyW
RegReplaceKeyW
RegGetKeySecurity
RegEnumKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyA
user32
IsMenu
InsertMenuA
GetDC
GetDlgItem
LoadMenuA
GetWindowTextLengthA
DialogBoxParamA
LoadCursorA
AppendMenuW
AppendMenuA
AlignRects
DrawIconEx
DrawTextW
AppendMenuA
LoadMenuA
GetDlgItem
DrawIconEx
GetWindowTextLengthA
GetDC
IsMenu
CalcMenuBar
AppendMenuW
kernel32
DeleteFileW
GetCPInfo
FindAtomA
CreateThread
GetCommandLineA
Sleep
CopyFileA
CopyFileExW
FindFirstFileA
DeleteFileA
DeleteFileW
GetCPInfo
CreateThread
GetCommandLineA
CopyFileA
SetLastError
CreateProcessA
CreateDirectoryA
OpenFileMappingA
ExitThread
GetFileTime
DeleteFileA
GlobalFree
CopyFileExW
FindAtomA
GetComputerNameA
CopyFileExA
WriteFile
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 210B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 319B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ