Static task
static1
Behavioral task
behavioral1
Sample
cd6e281705c5ace3d7040faf34b0b7af.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd6e281705c5ace3d7040faf34b0b7af.exe
Resource
win10v2004-20240226-en
General
-
Target
cd6e281705c5ace3d7040faf34b0b7af
-
Size
252KB
-
MD5
cd6e281705c5ace3d7040faf34b0b7af
-
SHA1
8f0f824e7db5ac63722bd880f388c1febf3e34fb
-
SHA256
dcb478b31e061304dab51063d43c0dc23c04f8917ab7ef2b2fe91c934c78d8c5
-
SHA512
570056a191c420684aa416bbd7fb408056f74b8c86e545b0744a4a5eb720a3dd37e6a53862834bbeb261bfc30e5d77a5d2217c3620c9c339c52e4924967b2cdb
-
SSDEEP
3072:glm9h+rM7cixiGBvLuPeP/OYz/sq+mpqOp/5H8zMrVUhNV1uOlz:g894rU7Bea/XOmQGeMrVULuO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd6e281705c5ace3d7040faf34b0b7af
Files
-
cd6e281705c5ace3d7040faf34b0b7af.exe windows:4 windows x86 arch:x86
5d0039dd685838d75808b74a6753f68b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
ReadConsoleA
GetCurrentThreadId
MoveFileA
GetCommandLineA
ChangeTimerQueueTimer
GetComputerNameA
OutputDebugStringA
ReadConsoleOutputCharacterA
OpenProcess
GetVolumePathNameA
GetLogicalDrives
GetFileAttributesExA
SetEndOfFile
GetConsoleTitleA
SetLocaleInfoA
SetFileAttributesA
lstrcmpi
GetProcessIoCounters
WriteConsoleOutputCharacterA
SetTimeZoneInformation
WideCharToMultiByte
LZCopy
IsBadStringPtrA
GetProfileIntA
GetTapeParameters
OpenMutexA
WriteConsoleInputA
GetExitCodeProcess
ReadConsoleA
GetDllDirectoryA
GetDevicePowerState
GlobalWire
LockFile
UnmapViewOfFile
UpdateResourceA
ClearCommBreak
lstrcpynA
GetLocalTime
GetConsoleCommandHistoryLengthW
OpenWaitableTimerA
GetLocalTime
EndUpdateResourceA
HeapReAlloc
GetBinaryTypeA
WriteFile
GetVersion
IsBadHugeReadPtr
HeapDestroy
LZClose
IsSystemResumeAutomatic
SetProcessShutdownParameters
GetModuleFileNameA
ReadConsoleOutputA
SetLocalPrimaryComputerNameA
GetSystemTimeAsFileTime
ConnectNamedPipe
UnregisterConsoleIME
EnumResourceTypesA
SetDefaultCommConfigA
GetWindowsDirectoryA
SetThreadPriority
ReleaseMutex
CreateMutexA
GetPrivateProfileSectionNamesA
QueryInformationJobObject
GetConsoleWindow
CopyFileExA
GetStringTypeExA
GetConsoleCP
lstrcpyn
EnumResourceNamesA
GetCurrencyFormatA
Module32Next
GetCalendarInfoA
SetTapePosition
ReadConsoleInputA
HeapSize
GetFileTime
SetupComm
SetLocalTime
IsValidCodePage
DeleteTimerQueue
GetPrivateProfileSectionA
LocalLock
FillConsoleOutputCharacterA
winmm
timeGetSystemTime
user32
LoadMenuIndirectW
OpenWindowStationA
MessageBoxTimeoutA
EnableMenuItem
DrawCaptionTempA
GetKeyNameTextA
GetClassLongA
GetUpdateRgn
SubtractRect
GetMessageA
CreateWindowStationW
LoadBitmapA
SetClipboardData
GetMouseMovePointsEx
SetClipboardViewer
InsertMenuItemA
CallMsgFilterA
FindWindowExW
DeviceEventWorker
EnumDisplayDevicesA
ToUnicodeEx
CheckMenuRadioItem
IsServerSideWindow
AdjustWindowRectEx
GetMenu
GetKeyboardState
TranslateMDISysAccel
UnionRect
UnionRect
RegisterLogonProcess
SetWindowPos
ChildWindowFromPointEx
CreateDesktopA
SetSysColors
RegisterClassA
AnyPopup
RegisterRawInputDevices
GetLastInputInfo
CharNextA
CliImmSetHotKey
SetClipboardData
TrackPopupMenu
GetWindowRect
LoadCursorA
GetDoubleClickTime
PrivateExtractIconsA
AppendMenuA
GetWindowTextA
TranslateAccelerator
AdjustWindowRect
EnableMenuItem
CreateWindowStationA
InsertMenuItemA
GetMenuItemInfoA
CreateMenu
LoadMenuIndirectW
SetCaretPos
FlashWindowEx
SetInternalWindowPos
ActivateKeyboardLayout
DestroyWindow
IsCharAlphaA
RegisterUserApiHook
CharNextExA
DefDlgProcA
CharUpperBuffA
DrawAnimatedRects
CreateDialogIndirectParamA
GetMenuDefaultItem
IsCharAlphaNumericA
LockWorkStation
CountClipboardFormats
MapVirtualKeyExA
PrivateExtractIconExA
SetCapture
GetMenuItemCount
DestroyAcceleratorTable
LockWorkStation
GetCaretPos
DrawTextExA
ChangeDisplaySettingsA
SetProcessWindowStation
SetRect
SetDlgItemTextA
Sections
.idata Size: - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 236KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ