Static task
static1
Behavioral task
behavioral1
Sample
d702fbab75101daeb6d4bec8ef0a202e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d702fbab75101daeb6d4bec8ef0a202e.exe
Resource
win10v2004-20240226-en
General
-
Target
d702fbab75101daeb6d4bec8ef0a202e
-
Size
170KB
-
MD5
d702fbab75101daeb6d4bec8ef0a202e
-
SHA1
3c7f2935d8e6245838381d7f8d78111ed21c65b3
-
SHA256
d3a8966aeb556e0d57919c75df5cc83d78435f1bc7b23c0fd5ffd90f09bc1a95
-
SHA512
a40f80a7a45ed81bd9d1286e5b86586a2d9900aa4c780005f870d7bf6b8bf20342fb0d03804fde453a11e21516258c8d79f6cfc53709508926af1646ff332157
-
SSDEEP
3072:ATMDjSyJii9ISMOZZibSwKXfwpH0trTefkWgAwaGtN1zKH2:Laq79IS5ZmSwqwpHWvI58O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d702fbab75101daeb6d4bec8ef0a202e
Files
-
d702fbab75101daeb6d4bec8ef0a202e.exe windows:4 windows x86 arch:x86
d02f0b3f773f29f5ca7a24dcc4e0fa69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
lstrlenA
GetCPInfo
MulDiv
GetCurrentProcess
LoadLibraryExA
GetACP
lstrcmpA
GetStringTypeW
ExitProcess
ReadFile
VirtualAlloc
GetProcAddress
SetEvent
FormatMessageA
GetModuleHandleA
LocalReAlloc
GetModuleFileNameA
ole32
CreateStreamOnHGlobal
GetHGlobalFromStream
CoUnmarshalInterface
CLSIDFromString
OleRegGetUserType
CoDisconnectObject
user32
GetDCEx
SetPropA
GetMenuStringA
EnableWindow
UnregisterClassA
EnumThreadWindows
WindowFromPoint
CharToOemA
ChildWindowFromPoint
IntersectRect
GetMenu
CreatePopupMenu
GetClassLongA
FindWindowA
GetMenuItemID
PeekMessageA
DrawAnimatedRects
RemovePropA
GetScrollInfo
GetCursorPos
SetMenuItemInfoA
GetLastActivePopup
GetActiveWindow
GetSystemMenu
SetRect
IsIconic
DefWindowProcA
GetWindowRect
InvalidateRect
CloseClipboard
SetScrollInfo
DestroyMenu
SetTimer
GetFocus
GetWindowThreadProcessId
CharNextA
DefFrameProcA
MessageBoxA
MsgWaitForMultipleObjects
GetForegroundWindow
GetWindowLongA
ActivateKeyboardLayout
PostQuitMessage
GetDesktopWindow
CharLowerBuffA
SetFocus
RegisterClipboardFormatA
LoadCursorA
TranslateMessage
wsprintfA
SendMessageA
UnhookWindowsHookEx
UpdateWindow
IsWindowVisible
GetCapture
GetClipboardData
GetKeyboardState
SetCursor
CreateIcon
SetMenu
AdjustWindowRectEx
GetKeyboardLayoutList
InsertMenuItemA
KillTimer
GetKeyboardLayoutNameA
IsZoomed
GetSysColorBrush
SetScrollPos
OemToCharA
SetWindowPlacement
GetMenuState
PtInRect
FrameRect
MessageBeep
GetClassNameA
ReleaseDC
GetSystemMetrics
EnumWindows
RegisterWindowMessageA
InflateRect
GetSysColor
IsWindowEnabled
LoadIconA
GetKeyboardType
GetCursor
FillRect
GetMenuItemCount
GetDC
ScrollWindow
IsDialogMessageA
SetWindowLongW
GetPropA
DrawEdge
EnableMenuItem
CallWindowProcA
DrawFrameControl
OpenClipboard
GetDlgItem
DestroyWindow
SendMessageW
IsDialogMessageW
GetIconInfo
ShowWindow
GetKeyState
DispatchMessageW
SetActiveWindow
DispatchMessageA
CheckMenuItem
TranslateMDISysAccel
IsWindow
PostMessageA
CreateWindowExA
RedrawWindow
DeleteMenu
ShowScrollBar
EndPaint
GetClientRect
MapVirtualKeyA
CreateMenu
CallNextHookEx
CharUpperBuffA
LoadBitmapA
LoadKeyboardLayoutA
GetParent
SetCapture
SetForegroundWindow
GetTopWindow
CharNextW
SystemParametersInfoA
EmptyClipboard
GetMenuItemInfoA
IsRectEmpty
ScreenToClient
TrackPopupMenu
GetScrollPos
SetParent
EnumChildWindows
BeginPaint
RegisterClassA
GetWindowPlacement
GetWindowLongW
PeekMessageW
GetScrollRange
MoveWindow
GetKeyboardLayout
EqualRect
SetWindowsHookExA
GetMessagePos
DestroyCursor
SetClassLongA
DrawIconEx
IsChild
DrawMenuBar
MapWindowPoints
GetClassInfoA
RemoveMenu
CharLowerA
DrawIcon
DefMDIChildProcA
InsertMenuA
GetKeyNameTextA
SetWindowPos
OffsetRect
EnableScrollBar
GetSubMenu
SetClipboardData
SetScrollRange
ShowOwnedPopups
LoadStringA
GetWindow
shlwapi
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
PathIsContentTypeA
PathGetCharTypeA
SHDeleteValueA
SHDeleteKeyA
SHStrDupA
gdi32
SelectPalette
CreateDIBSection
LineTo
GetDCOrgEx
GetBitmapBits
BitBlt
CopyEnhMetaFileA
shell32
DragQueryFileA
SHGetSpecialFolderLocation
Shell_NotifyIconA
comdlg32
FindTextA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
version
VerInstallFileA
Sections
CODE Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE