Static task
static1
Behavioral task
behavioral1
Sample
dba409d517d394e6fe810fe9b9b554f4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dba409d517d394e6fe810fe9b9b554f4.exe
Resource
win10v2004-20240226-en
General
-
Target
dba409d517d394e6fe810fe9b9b554f4
-
Size
283KB
-
MD5
dba409d517d394e6fe810fe9b9b554f4
-
SHA1
167248b3d44f97f80324436b29c1ff286b9499ba
-
SHA256
db77815b4766ffa916220c582fce7bcaf383987efab92bf2c38cd6789c12e082
-
SHA512
41253995374c16372481559565cb4d6d79e17de47a3b86c3322e19bc79fd314f0bfc1b4dcd99dae951312cb7710ec9037fd7f829d305f197fe367fbc8b70a6aa
-
SSDEEP
6144:89GrX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:uSEXSopNBFow9mLRPKkALVduF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource dba409d517d394e6fe810fe9b9b554f4
Files
-
dba409d517d394e6fe810fe9b9b554f4.exe windows:4 windows x86 arch:x86
b9f9a2b9819b5bfc34e516afdeecebd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
shell32
SHGetFolderPathW
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
iphlpapi
GetIpAddrTable
kernel32
GetEnvironmentStringsW
TlsSetValue
GetCurrentProcess
HeapDestroy
AddAtomA
SetLastError
GetFileType
IsBadWritePtr
SetEndOfFile
VirtualQuery
VirtualFree
GetSystemTimeAsFileTime
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
SetHandleCount
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetACP
InterlockedExchange
GetStartupInfoA
EnumResourceNamesA
HeapCreate
lstrcatA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter
GetStdHandle
QueryPerformanceCounter
WriteFile
VirtualAlloc
GetModuleFileNameA
TerminateProcess
GetCPInfo
GetOEMCP
GetVersionExA
GetCurrentProcessId
GetLocaleInfoA
SetUnhandledExceptionFilter
Sections
.text Size: 143KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ