Static task
static1
Behavioral task
behavioral1
Sample
cae347e9cae0aefd15d2751fee9b76a4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cae347e9cae0aefd15d2751fee9b76a4.exe
Resource
win10v2004-20240226-en
General
-
Target
cae347e9cae0aefd15d2751fee9b76a4
-
Size
42KB
-
MD5
cae347e9cae0aefd15d2751fee9b76a4
-
SHA1
ac963c57e0985447e4df491f3b870bfb27b6c4c3
-
SHA256
5bc070cf5f6dbfd422d44f360eb1e2f57e25cd598a3240183efea1e5e200992e
-
SHA512
c79b92915cd4ebb5f4384a649e3550e37bec566ce1aa8af1833d3795ac3cda38a103cf1bc94383afaf428781616eb8d674ba0ab953130c65d64b6bfacd56cde0
-
SSDEEP
768:wS3unx53zHFmu4hl+SrTRmRiYRx5UU29k69Nr+pB2TB:wS3wxVIf7RmRivI6fTTB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cae347e9cae0aefd15d2751fee9b76a4
Files
-
cae347e9cae0aefd15d2751fee9b76a4.exe windows:4 windows x86 arch:x86
e836c045d733ed885e6589dab3a90b10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_vsnwprintf
__dllonexit
wcsrchr
_ltoa
memset
_pctype
fclose
_snprintf
_getcwd
gdi32
DeleteDC
LineTo
GetStockObject
CreateRectRgnIndirect
GetBkColor
GetDeviceCaps
ExtTextOutA
GetTextExtentPoint32A
SetBkColor
kernel32
LCMapStringW
IsValidLocale
GetCurrentProcess
WriteConsoleA
MultiByteToWideChar
RaiseException
SetEndOfFile
SetLastError
WriteConsoleW
SetErrorMode
FileTimeToSystemTime
InterlockedExchange
GlobalMemoryStatus
CreateFileA
ole32
CoGetObjectContext
OleQueryLinkFromData
OleCreate
CoRegisterMallocSpy
OleIsCurrentClipboard
OleGetIconOfFile
CoDisconnectObject
CoReleaseServerProcess
CoGetStandardMarshal
user32
InsertMenuA
SetTimer
DrawTextA
MoveWindow
GetMenuItemCount
GetUserObjectSecurity
SetPropA
GetWindowLongA
advapi32
SetSecurityInfo
MapGenericMask
FreeSid
GetSecurityInfo
SetKernelObjectSecurity
RegDeleteKeyA
CreateProcessAsUserA
GetSidSubAuthorityCount
GetAce
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE