Static task
static1
Behavioral task
behavioral1
Sample
cad9b8182570a38576344fa3d2ce439f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cad9b8182570a38576344fa3d2ce439f.exe
Resource
win10v2004-20240226-en
General
-
Target
cad9b8182570a38576344fa3d2ce439f
-
Size
58KB
-
MD5
cad9b8182570a38576344fa3d2ce439f
-
SHA1
fa47f1c001abfcbf8847f86fa0ae7c9c99a629ef
-
SHA256
a00749512bf2179e8ff1995cfcecedb7598262ab9c3b3fbbff6f258d51e2d5ee
-
SHA512
3a43860681fc963ba1d12f133b505bc00a76d3f1f53e474953647eb87b38c4a34663313ab91a4e766fc41156a0e58e93ec0f40904bfb7e4f720a9b5c5b7fa8a8
-
SSDEEP
1536:y+ndzjEkg9RfhYbi6AnkN+7Z3pAdwM1MVAyqa+qNSjUy8:ywMnRpe3AkwN5AuM1yGqNSjUy8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cad9b8182570a38576344fa3d2ce439f
Files
-
cad9b8182570a38576344fa3d2ce439f.exe windows:1 windows x86 arch:x86
19c74814f653ba9407c48b1ee36273e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
_controlfp
memcpy
exit
_exit
_adjust_fdiv
_XcptFilter
__p__commode
_except_handler3
__getmainargs
_initterm
__setusermatherr
_acmdln
gdi32
ExtTextOutA
CreateRectRgn
SetBkColor
SetTextColor
BitBlt
kernel32
GetModuleHandleA
GetCurrentProcessId
GetModuleFileNameA
VirtualProtect
HeapAlloc
GetStartupInfoA
GetLastError
HeapCreate
user32
GetClassLongA
DefMDIChildProcA
GetActiveWindow
GetParent
DeleteMenu
DrawFrameControl
CreateWindowExA
FindWindowA
GetDlgItem
LoadAcceleratorsA
UnionRect
FrameRect
SetClassLongA
GetWindowRect
SetDlgItemTextA
GetMenu
LoadImageA
DefDlgProcA
GetWindowDC
DialogBoxIndirectParamA
InvalidateRect
OpenClipboard
GetDlgItemTextA
BeginDeferWindowPos
ShowWindow
ClientToScreen
ReleaseDC
ChildWindowFromPoint
GetSysColor
CallWindowProcA
RemoveMenu
GetClientRect
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ