Static task
static1
Behavioral task
behavioral1
Sample
d37de425ddd1f4170c0e0a68845ab8d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d37de425ddd1f4170c0e0a68845ab8d5.exe
Resource
win10v2004-20240226-en
General
-
Target
d37de425ddd1f4170c0e0a68845ab8d5
-
Size
317KB
-
MD5
d37de425ddd1f4170c0e0a68845ab8d5
-
SHA1
f2c3d66e1b68bad17ba374cfa43042d516512d61
-
SHA256
8f794d4e917c7a2230e67a7bc01dcef7705c2834ebbaf83d079c257b5d2acb14
-
SHA512
a0edc50da2339afab5508d2ed2ceb78f0e278991dcbbd720e94d2729b40cde9d15b060b8daa5aefee4e32269d0749a18fc20d3fa19a237bb73e693c6093f6b37
-
SSDEEP
6144:kUYv1tm1gq6PBNELGsrIHXuAzW6dkrTwSE0oAR2/y4l9jxSi2ohp5rn4d1x:kZve1NuNEyBXja6dkrcnqyz9jp/rn+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d37de425ddd1f4170c0e0a68845ab8d5
Files
-
d37de425ddd1f4170c0e0a68845ab8d5.exe windows:4 windows x86 arch:x86
259293d15b16e78c153a3fa85311f156
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapCreate
GetLastError
SizeofResource
RaiseException
GlobalUnlock
GetStdHandle
GetACP
InitAtomTable
LockResource
GlobalDeleteAtom
GlobalAddAtomA
LoadLibraryExA
SetErrorMode
MultiByteToWideChar
SetConsoleCP
GlobalFree
VirtualProtect
EnterCriticalSection
GetPriorityClass
GetTimeFormatA
user32
AnyPopup
GetForegroundWindow
GetParent
EndPaint
ReleaseDC
ShowWindow
DrawMenuBar
IsIconic
GetClassInfoExA
GetWindow
GetClassNameA
GetCursorPos
GetWindowTextA
DrawEdge
ValidateRect
GetFocus
GetActiveWindow
GetMenuItemInfoA
BeginPaint
mprapi
MprAdminUserGetInfo
MprAdminUserRead
MprAdminUserWrite
MprAdminUserOpen
MprAdminUserClose
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ