Static task
static1
Behavioral task
behavioral1
Sample
cdf4c26fe1824dade7764f3df44617ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdf4c26fe1824dade7764f3df44617ad.exe
Resource
win10v2004-20240226-en
General
-
Target
cdf4c26fe1824dade7764f3df44617ad
-
Size
320KB
-
MD5
cdf4c26fe1824dade7764f3df44617ad
-
SHA1
af2c2329ba498ca4b5b3d1d5ce31cf13a960f618
-
SHA256
09f634eb98b1e400734982e2917558b7cad8d61ee513e5ec01bcad237dfa2d3b
-
SHA512
c414aedb17e670502b718c6d13732dd4f419bb8b6350aefb473f46230e96f6a39bb9e7a76ed8b7e5d9d55807ab68ee4a088300ce25ae3f3de78768205a891f6d
-
SSDEEP
6144:QJRbv2rdDQv2hmzil+c2a/rGoCj497p8NNYuCYI4vj9viRVBZB4DvKDF:wv2rdDQv2hTl+c2axkNYux54vD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf4c26fe1824dade7764f3df44617ad
Files
-
cdf4c26fe1824dade7764f3df44617ad.exe windows:4 windows x86 arch:x86
bf41d925d36d13907098e2174a7cfe5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
GetProcAddress
CreateFileMappingA
GlobalAlloc
IsValidLocale
GetCurrentThreadId
MapViewOfFile
GetVersion
GetStartupInfoA
GetModuleFileNameA
GetCommandLineA
CloseHandle
ExitProcess
GetProfileIntA
GlobalReAlloc
GetTimeZoneInformation
GetFileInformationByHandle
GetTempFileNameA
GetProfileStringA
GetPrivateProfileStringA
LoadLibraryA
GetCurrentDirectoryA
SearchPathA
WinExec
GetModuleHandleA
FreeLibrary
MulDiv
IsDBCSLeadByte
LocalSize
SetEndOfFile
lstrcpynA
SetFilePointer
SetErrorMode
_llseek
_lwrite
SetCurrentDirectoryA
_lcreat
GetLastError
GetUserDefaultLCID
_lread
GetTickCount
_lclose
LocalReAlloc
_lopen
FileTimeToLocalFileTime
GetSystemTime
SystemTimeToFileTime
Sleep
SetFileAttributesA
MoveFileA
VirtualAlloc
CopyFileA
CompareStringA
GetWindowsDirectoryA
VirtualFree
GetTempPathA
GetFileAttributesA
FindNextFileA
GetSystemDirectoryA
FindClose
lstrcmpiA
FindFirstFileA
lstrcatA
DeleteFileA
RtlZeroMemory
GlobalLock
lstrlenA
lstrcpyA
GlobalUnlock
GetFullPathNameA
LocalFree
GlobalFree
RtlMoveMemory
LocalAlloc
GetLogicalDrives
WideCharToMultiByte
MultiByteToWideChar
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
UnhandledExceptionFilter
RtlUnwind
GetEnvironmentStrings
user32
CharNextA
CharPrevA
PtInRect
ShowScrollBar
UpdateWindow
FrameRect
InvalidateRgn
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassExA
LoadImageA
LoadIconA
RegisterWindowMessageA
LoadCursorA
LoadAcceleratorsA
PostQuitMessage
SetRectEmpty
IsRectEmpty
SystemParametersInfoA
EqualRect
TranslateAcceleratorA
SetMessageQueue
SetCapture
ChildWindowFromPoint
GetMessagePos
EndPaint
BeginPaint
InflateRect
ClientToScreen
SetCursor
GetSysColorBrush
EnumThreadWindows
KillTimer
ReleaseCapture
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
CopyRect
GetMenu
GetSubMenu
GetMenuItemCount
GetKeyState
GetCursorPos
CheckMenuItem
TrackPopupMenu
SetActiveWindow
SetTimer
FillRect
SetRect
InvertRect
CharLowerA
WinHelpA
GetClientRect
IsWindowEnabled
GetWindow
VkKeyScanA
GetClassNameA
DefWindowProcA
RegisterClassA
GetDesktopWindow
CreateWindowExA
UnregisterClassA
CharUpperA
FindWindowA
EnumWindows
CallWindowProcA
GetSystemMetrics
GetSysColor
DrawFocusRect
IsIconic
EndDialog
SendDlgItemMessageA
MessageBoxA
DialogBoxParamA
GetDlgItemTextA
SetDlgItemTextA
GetFocus
LoadBitmapA
ScreenToClient
GetDC
ReleaseDC
ValidateRect
IsDlgButtonChecked
CheckDlgButton
EnumChildWindows
GetWindowRect
InvalidateRect
OffsetRect
SetForegroundWindow
LoadStringA
GetMessageA
GetAsyncKeyState
IsWindow
DestroyWindow
wsprintfA
IsZoomed
ShowWindow
IsWindowVisible
MoveWindow
CreateDialogParamA
PeekMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
GetWindowLongA
SetWindowLongA
SetWindowPos
EnableWindow
SendMessageA
GetDlgItem
SetWindowTextA
SetFocus
GetParent
PostMessageA
GetWindowTextA
EnableMenuItem
CreateMenu
InsertMenuA
DeleteMenu
DrawMenuBar
DestroyMenu
LoadMenuA
SetMenu
GetWindowTextLengthA
IsClipboardFormatAvailable
CreatePopupMenu
AppendMenuA
gdi32
DeleteDC
SelectObject
CreateCompatibleDC
GetObjectA
GetTextExtentPoint32A
SetBkColor
GetTextMetricsA
SetTextColor
GetStockObject
ExtTextOutA
PatBlt
SetPixel
BitBlt
GetDeviceCaps
DeleteMetaFile
CreateCompatibleBitmap
RealizePalette
SelectPalette
CreateDIBitmap
CreateBitmap
SetStretchBltMode
SetDIBits
CreateDiscardableBitmap
RestoreDC
CreateSolidBrush
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
SetMapMode
SaveDC
SetViewportOrgEx
SetWindowOrgEx
CreatePalette
LPtoDP
SetMetaFileBitsEx
SetBkMode
CreateICA
SetROP2
DeleteObject
CreatePen
GetTextColor
SetTextAlign
GetBkColor
GetTextAlign
CreateFontIndirectA
TextOutA
Rectangle
LineTo
GetNearestColor
GetTextExtentPointA
InvertRgn
MoveToEx
SetRectRgn
CreateRectRgn
CombineRgn
IntersectClipRect
CreatePatternBrush
CreateFontA
UnrealizeObject
GetSystemPaletteEntries
SetBrushOrgEx
EndDoc
EndPage
CreateDCA
SetAbortProc
Escape
StartDocA
StretchBlt
StartPage
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE