Static task
static1
Behavioral task
behavioral1
Sample
de2b2b70d3abd8460785c4e7ae2bdb70.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de2b2b70d3abd8460785c4e7ae2bdb70.exe
Resource
win10v2004-20240226-en
General
-
Target
de2b2b70d3abd8460785c4e7ae2bdb70
-
Size
126KB
-
MD5
de2b2b70d3abd8460785c4e7ae2bdb70
-
SHA1
0591726b23273a209cabb7a9d3dcdf0ba423ed58
-
SHA256
715543afadd3548cf145bd8fe63b7cd0477e33b6f5bf71a19efc950c9705c4b1
-
SHA512
927f62f131d5e9dd50bbd8062b91a72e4b806fba81ec34f473780ed8fe6ab7691f5de3d8f621c5bedf9b19cd44903c9f606afe92e2e10176e637e9274c5bff0b
-
SSDEEP
3072:TZ4J0UgQK/R9qq/OByaXoojnXUjm5jRn+k17XMmZSpZ:TbUg1/ukOfjXUjm3n+cX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de2b2b70d3abd8460785c4e7ae2bdb70
Files
-
de2b2b70d3abd8460785c4e7ae2bdb70.exe windows:4 windows x86 arch:x86
3edcbee954012d59c133063298e9150a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegDeleteValueA
GetLengthSid
version
GetFileVersionInfoSizeA
VerInstallFileA
VerFindFileA
comctl32
ImageList_Draw
ImageList_Read
ImageList_Write
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
kernel32
GlobalDeleteAtom
IsBadReadPtr
GetCommandLineW
GetCommandLineA
GetACP
ExitProcess
GetModuleHandleA
GetOEMCP
LoadLibraryExA
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
FindResourceA
ExitThread
ole32
OleCreateStaticFromData
CoRevokeClassObject
CoGetMalloc
StgOpenStorage
CreateStreamOnHGlobal
CLSIDFromProgID
CoCreateInstanceEx
CoReleaseMarshalData
CoCreateGuid
CLSIDFromString
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ