Static task
static1
Behavioral task
behavioral1
Sample
d3a02ab8d61bbdc458feb62ce4e9790c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3a02ab8d61bbdc458feb62ce4e9790c.exe
Resource
win10v2004-20240226-en
General
-
Target
d3a02ab8d61bbdc458feb62ce4e9790c
-
Size
96KB
-
MD5
d3a02ab8d61bbdc458feb62ce4e9790c
-
SHA1
92ee6179bc2d3da85b56c1e887d462b99dfc9bdf
-
SHA256
75f86b21c3b189276845243b1db50e2549b1772f3b859a0f27e22864abb7d386
-
SHA512
f6f183aed03836403164600edbf09d7f7c76e570eeb6a17dc7307068ee6ff659e7321ee7de79d922bb1f38000413015c073206e9cab1e884fca57020cf658f2a
-
SSDEEP
1536:f7smjANXfXonpvWxwPAeWw9BkMQaDbcdw4LrLXzJ/UcMxdWXLrMw9ZkQB6QIkgmw:fImjConp+2PbDlQ6cd9LXzJ/Ug7gQkLo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3a02ab8d61bbdc458feb62ce4e9790c
Files
-
d3a02ab8d61bbdc458feb62ce4e9790c.exe windows:5 windows x86 arch:x86
320ca46711a6037a32d1bc3d6c618dd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegReplaceKeyA
RegDeleteKeyW
RegOpenKeyA
RegEnumKeyW
RegLoadKeyW
RegReplaceKeyW
RegEnumKeyA
RegEnumKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegLoadKeyA
RegOpenKeyW
RegFlushKey
RegDeleteKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegReplaceKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExA
RegLoadKeyW
RegReplaceKeyA
RegLoadKeyA
RegOpenKeyW
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
kernel32
CopyFileA
GetStdHandle
ExitProcess
GetFileTime
CopyFileExW
GlobalFree
DeleteAtom
FindAtomW
GetLocalTime
ExitThread
FlushFileBuffers
OpenFile
OpenFileMappingA
GetLastError
GetCPInfo
FindClose
GetPriorityClass
FindAtomA
GetLocalTime
DeleteFileA
FindClose
CopyFileA
WriteFile
GetFileType
FreeResource
FindAtomA
FindAtomW
CopyFileExA
FlushFileBuffers
AddAtomA
OpenFileMappingA
ExitThread
ReadFile
GetCPInfo
WriteFile
GetStdHandle
GetCommandLineA
GetPriorityClass
GetFileTime
OpenFile
FreeResource
DeleteFileA
CopyFileExA
FlushFileBuffers
AddAtomW
GetFileType
DeleteAtom
FatalExit
FindAtomW
GetFileType
DeleteFileA
FreeResource
AddAtomW
GetFileTime
FatalExit
GetPriorityClass
GetCommandLineA
ReadFile
GetCPInfo
OpenFile
GetStdHandle
GlobalFree
CopyFileExW
OpenFileMappingA
CreateDirectoryA
CopyFileA
DeleteFileW
DeleteAtom
GetLastError
ExitThread
FindClose
ExitProcess
WriteFile
ReadFile
GetLastError
FindClose
DeleteAtom
GetLocalTime
FreeResource
FatalExit
GetPriorityClass
GetCommandLineA
FindAtomW
FindAtomA
AddAtomW
AddAtomA
ReadFile
GetFileTime
GetStdHandle
GetFileType
GetCommandLineA
OpenFileMappingA
DeleteAtom
CopyFileExA
CopyFileExW
GetCPInfo
DeleteFileA
CopyFileA
FatalExit
OpenFile
ExitProcess
GetPriorityClass
FindClose
CopyFileA
FlushFileBuffers
WriteFile
CopyFileExA
ReadFile
DeleteFileW
GetLastError
ExitThread
GetCPInfo
GetFileType
AddAtomW
ExitProcess
DeleteAtom
GlobalFree
GetLastError
GetPriorityClass
GetCommandLineA
FreeResource
ExitThread
FindAtomW
GlobalFree
WriteFile
AddAtomW
AddAtomA
CopyFileA
GetLocalTime
FindAtomA
OpenFileMappingA
OpenFile
CopyFileExA
CreateDirectoryA
FindClose
GetCPInfo
WriteFile
FlushFileBuffers
CopyFileExW
FreeResource
FatalExit
FindAtomW
GetFileType
OpenFileMappingA
GetPriorityClass
DeleteFileA
ExitProcess
ExitThread
AddAtomA
GetFileTime
FindClose
GetPriorityClass
CopyFileA
GetCPInfo
OpenFile
GetLocalTime
AddAtomA
ExitThread
FatalExit
CopyFileExW
FindClose
DeleteAtom
WriteFile
CopyFileExA
AddAtomW
GetFileTime
GetStdHandle
GetFileType
ExitProcess
FindAtomW
ReadFile
AddAtomA
FatalExit
AddAtomW
DeleteAtom
GetFileTime
OpenFile
CopyFileExW
DeleteFileA
ExitThread
GetStdHandle
GlobalFree
DeleteFileW
OpenFileMappingA
ReadFile
DeleteAtom
FindAtomW
FindAtomA
GetLastError
OpenFileMappingA
GetPriorityClass
FatalExit
FlushFileBuffers
CopyFileA
GetFileType
FreeResource
WriteFile
CopyFileExA
GetCommandLineA
DeleteFileW
AddAtomA
FindAtomA
CopyFileA
GetLocalTime
CopyFileExW
GetPriorityClass
FindClose
GetLastError
GetStdHandle
ExitThread
FatalExit
DeleteFileA
AddAtomW
DeleteAtom
user32
AppendMenuA
DrawIconEx
CalcMenuBar
EndDialog
GetMenu
CopyRect
GetCursor
BeginPaint
CopyIcon
BlockInput
InsertMenuA
CopyImage
DialogBoxParamA
LoadCursorA
LoadMenuA
InsertMenuA
IsMenu
GetDlgItem
EndDialog
CopyRect
IsWindow
BeginPaint
GetFocus
AlignRects
GetDC
CreateIcon
DrawIconEx
AppendMenuW
AppendMenuA
LoadCursorA
CalcMenuBar
CopyImage
DrawIcon
GetWindowTextLengthA
BlockInput
CopyRect
LoadMenuA
DrawIcon
EndDialog
InsertMenuA
GetDlgItem
AppendMenuA
DrawTextA
CalcMenuBar
GetDC
IsWindow
CloseWindow
AlignRects
GetWindowTextLengthA
DrawIconEx
CopyImage
GetCursor
DialogBoxParamA
GetWindowTextLengthA
DrawIconEx
DrawTextA
LoadMenuA
CopyIcon
AlignRects
IsWindow
DialogBoxParamW
CreateIcon
CloseWindow
InsertMenuA
GetDlgItem
DialogBoxParamA
DrawTextW
IsMenu
Sections
.b92af Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.43e60 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1hga3 Size: 42KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.59ed Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 719B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ