Static task
static1
Behavioral task
behavioral1
Sample
cae12385e38bbda4fc79f4a9ea6bade7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cae12385e38bbda4fc79f4a9ea6bade7.exe
Resource
win10v2004-20240226-en
General
-
Target
cae12385e38bbda4fc79f4a9ea6bade7
-
Size
95KB
-
MD5
cae12385e38bbda4fc79f4a9ea6bade7
-
SHA1
1e995f3842772dd9e8c94019adbc8f4bcd675705
-
SHA256
fc481d05c933a4d9d1f62e87432b0bf0ad0fad4710503eaace53067b90646ebe
-
SHA512
9fea7abf2a2bbd3065aa0f3b61eeac3ace553762b21b78a9bb9464cd3779efbe43e5536dfcd4ebc7fbe579ecf117ea0769f72ed4380298c8d31c03e6558cc1ff
-
SSDEEP
1536:PKJSDOTdqlcRlh1hNgNHb77BNzPZwYwmkYnYz:POgO5qlcRPKNHb77BRPqJmkYny
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cae12385e38bbda4fc79f4a9ea6bade7
Files
-
cae12385e38bbda4fc79f4a9ea6bade7.exe windows:4 windows x86 arch:x86
d9cbade87292843ab97bc584ed6a9e17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
IsWindow
FindWindowA
GetMenu
BlockInput
keybd_event
SetForegroundWindow
SetFocus
ShowWindow
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowExA
msvcrt
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
??1type_info@@UAE@XZ
__set_app_type
_except_handler3
_controlfp
strchr
strrchr
memcmp
strcmp
sscanf
strncpy
mbstowcs
strncat
wcslen
wcscpy
_stricmp
strcat
fprintf
time
rand
srand
strcpy
toupper
sprintf
wcscat
_snprintf
_EH_prolog
__CxxFrameHandler
ceil
_ftol
malloc
memset
memcpy
strlen
free
_splitpath
strcspn
??2@YAPAXI@Z
_vsnprintf
strstr
atoi
strtok
_strlwr
_strcmpi
_CxxThrowException
_iob
__p__fmode
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantClear
SysAllocString
VariantInit
mpr
WNetAddConnection2A
kernel32
OpenProcess
DeleteFileA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
CopyFileA
GetWindowsDirectoryA
GetFileTime
SetFileTime
LoadLibraryA
GetLocaleInfoA
CreateProcessA
lstrcmpiA
GetVersionExA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
CreateThread
ExitThread
CreateEventA
WaitForSingleObject
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
TransactNamedPipe
WriteFile
ReadFile
MultiByteToWideChar
Sleep
CloseHandle
TerminateProcess
GetCurrentProcess
GetCurrentThread
ExpandEnvironmentStringsA
GetModuleFileNameA
ReleaseMutex
CreateMutexA
GetSystemDirectoryA
LocalFree
LocalAlloc
TerminateThread
GetFileAttributesA
SetFileAttributesA
Sections
Size: 49KB - Virtual size: 49KB
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 379KB
IMAGE_SCN_MEM_WRITE
Size: 257B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE