Static task
static1
Behavioral task
behavioral1
Sample
d55f629f1dfacb2b7a945ca408b3ee81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d55f629f1dfacb2b7a945ca408b3ee81.exe
Resource
win10v2004-20240226-en
General
-
Target
d55f629f1dfacb2b7a945ca408b3ee81
-
Size
209KB
-
MD5
d55f629f1dfacb2b7a945ca408b3ee81
-
SHA1
7f804f3fbc98366e57c74974649753782f9eaf43
-
SHA256
8a3a33f5170428f06b1558319a9b9da10ab12c897b8076a4afc0f54685591da2
-
SHA512
4adf633af652c3af5429fe575a81eac3c2e590ae9322b826d487240bb404169a7107057d1ac0c6f31d9de3f3a71b8265090297f831eb5a6cf0a05198cdc5d134
-
SSDEEP
6144:rCLuOlV3jfVPoKSYtjrqF2e6LfXJypfY/m23Cr/FnurgM:r+ZV3ZHSYtjrq8L0pfpkCrdnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d55f629f1dfacb2b7a945ca408b3ee81
Files
-
d55f629f1dfacb2b7a945ca408b3ee81.exe windows:4 windows x86 arch:x86
ba4aee35bf7973d5191c4357094f3432
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
lstrcatW
GetCommandLineW
HeapAlloc
CreateFileW
InterlockedExchange
FileTimeToSystemTime
GetLongPathNameW
GetVersionExA
FreeEnvironmentStringsA
MoveFileW
GetVersionExW
WriteConsoleA
SetFileAttributesW
CreateMutexW
GetUserDefaultLCID
LoadLibraryW
InterlockedIncrement
GetStartupInfoA
LocalFree
GetConsoleMode
TlsAlloc
QueryPerformanceCounter
PeekNamedPipe
ReadFile
GetTimeFormatA
CloseHandle
TlsSetValue
GetDriveTypeW
ResumeThread
GetLocaleInfoW
RaiseException
GetCurrentDirectoryW
FindResourceW
LocalUnlock
GetDateFormatA
GetModuleHandleW
HeapDestroy
HeapCreate
LCMapStringW
TlsGetValue
WaitForSingleObject
GetStringTypeW
VirtualAlloc
GetEnvironmentStrings
GetFullPathNameW
SetHandleCount
CreateProcessW
SetLastError
GetCurrentProcessId
CreateFileA
GetModuleHandleA
GetSystemInfo
GetTimeZoneInformation
LoadLibraryA
FreeEnvironmentStringsW
LCMapStringA
lstrcpynW
GlobalSize
FindClose
GetProcAddress
GetCurrentThreadId
GetTickCount
HeapSize
MultiByteToWideChar
GetLocaleInfoA
VirtualProtect
VirtualQuery
RtlUnwind
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
GetStringTypeA
HeapFree
VirtualFree
GetFileType
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
user32
GetMenuItemCount
GetClientRect
comdlg32
FindTextW
GetFileTitleA
ReplaceTextA
PageSetupDlgW
GetOpenFileNameA
ChooseFontW
ChooseColorW
ReplaceTextW
GetSaveFileNameW
PageSetupDlgA
GetFileTitleW
FindTextA
ChooseFontA
ChooseColorA
PrintDlgA
PrintDlgW
GetOpenFileNameW
GetSaveFileNameA
ole32
StgIsStorageILockBytes
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ