Static task
static1
Behavioral task
behavioral1
Sample
cadc2ba5299da7d1835c1e4ee1afb527.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cadc2ba5299da7d1835c1e4ee1afb527.exe
Resource
win10v2004-20240226-en
General
-
Target
cadc2ba5299da7d1835c1e4ee1afb527
-
Size
741KB
-
MD5
cadc2ba5299da7d1835c1e4ee1afb527
-
SHA1
7e36673b58b13b1d6e1090bbfa16ceeb1c6d9271
-
SHA256
69fabf65628633f02298283a4f12dde2b9655d13604b9a596c672c5c4e90b1d4
-
SHA512
f289bf196608d6faf4edc39a7f5cad6eb39ca736379f14d43abbc52f1381710b2851dae204214dc3e99a5c389f341f0bacc97c97eba540486a1b9bc4dae95ad3
-
SSDEEP
12288:AW2eFt/NKcrI+TCLkLim/QkMzIyzotizPvvBuJZsJ8MLVKVArZSODme22c:pXFBNKefCXYQ/zDrzPvvoJZVMRmez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cadc2ba5299da7d1835c1e4ee1afb527
Files
-
cadc2ba5299da7d1835c1e4ee1afb527.exe windows:4 windows x86 arch:x86
9e830a1d33f2d4dc80fb8ae64d8309a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
comctl32
CreateUpDownControl
InitCommonControlsEx
CreateStatusWindow
gdi32
SelectObject
GetObjectA
SetMapMode
GetPolyFillMode
CreatePen
CreateEnhMetaFileW
GetMiterLimit
CreateDIBPatternBrush
DeleteDC
StrokePath
CloseMetaFile
GetRasterizerCaps
CreateDCA
CreateScalableFontResourceW
PaintRgn
GetTextFaceW
SetDIBits
GetDeviceCaps
GetTextExtentPointW
DeleteColorSpace
PolyBezierTo
IntersectClipRect
PlgBlt
CreateDIBSection
ScaleWindowExtEx
kernel32
LCMapStringW
GetTimeFormatA
GetSystemTime
GetDriveTypeW
TerminateProcess
CompareStringW
GetDateFormatA
GetCurrentProcess
DebugBreak
LCMapStringA
EnumTimeFormatsA
GetOEMCP
LoadLibraryA
GetEnvironmentStringsW
GetCurrentThreadId
GetModuleFileNameW
GetUserDefaultLCID
WriteFile
GetSystemTimeAsFileTime
GetStdHandle
SetFilePointer
TlsGetValue
GetStartupInfoA
LeaveCriticalSection
RaiseException
CreateMutexA
DeleteCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
UnhandledExceptionFilter
lstrlenA
VirtualFree
TlsSetValue
OutputDebugStringA
WideCharToMultiByte
FillConsoleOutputAttribute
SetConsoleCtrlHandler
InterlockedDecrement
IsValidCodePage
GetTempPathW
WritePrivateProfileSectionA
VirtualAlloc
AddAtomW
CloseHandle
EnumCalendarInfoExA
TlsFree
GetStringTypeW
GetVolumeInformationA
IsValidLocale
InterlockedIncrement
GetLocaleInfoW
GetProcessHeap
GetFileType
InterlockedExchange
HeapValidate
GetCommandLineA
CreateProcessA
GetConsoleOutputCP
HeapReAlloc
EnterCriticalSection
FreeLibrary
GetTickCount
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
ReadFile
FlushFileBuffers
GetConsoleCP
GetLocaleInfoA
GetStringTypeA
GetCPInfo
GetCurrentThread
GetConsoleMode
VirtualQuery
GetFileAttributesW
CompareStringA
IsBadReadPtr
OpenMutexA
ExitProcess
SetStdHandle
EnumResourceNamesW
HeapDestroy
SetLastError
WriteConsoleW
SetUnhandledExceptionFilter
CreateFileA
GetModuleFileNameA
InitializeCriticalSection
GetTimeZoneInformation
GetModuleHandleA
GetLastError
HeapCreate
SetEnvironmentVariableA
LoadLibraryW
lstrcatA
EnumSystemLocalesA
GetVersionExA
WriteConsoleA
HeapAlloc
OutputDebugStringW
TlsAlloc
FreeEnvironmentStringsA
GetACP
HeapFree
GetCurrentProcessId
RtlUnwind
GetProcAddress
IsDebuggerPresent
user32
EnumDisplaySettingsExW
ShowWindow
ShowScrollBar
AnimateWindow
RegisterClassExA
MessageBoxA
DestroyWindow
GetClassNameA
CreateWindowExW
RegisterClassA
DefWindowProcW
Sections
.text Size: 469KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ