Static task
static1
Behavioral task
behavioral1
Sample
df73c9d9ffac5a96149a04e36993b05e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df73c9d9ffac5a96149a04e36993b05e.exe
Resource
win10v2004-20240226-en
General
-
Target
df73c9d9ffac5a96149a04e36993b05e
-
Size
656KB
-
MD5
df73c9d9ffac5a96149a04e36993b05e
-
SHA1
b7031b2ff926fc78062a3fdd5a4e65d24a341b3a
-
SHA256
89fa85ed1ac7c233fc7e41aa2c879b3d53b523e7622c489798f95e84b442eea4
-
SHA512
d2b795728236a69a226652e006b8875f85a8ee671d9ea600c7184d79410e449dfaf96445ce320342adc38e497e52a2bc08a6a5a2762affad452c3494219a9a65
-
SSDEEP
12288:iBcIXKJwMYuAMklDOV/i0NNWYLeakUh5TQauBrUhvc8NdnkBW/:iHMY1MMDOQHEPZ5Mauiy8NVgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df73c9d9ffac5a96149a04e36993b05e
Files
-
df73c9d9ffac5a96149a04e36993b05e.exe windows:5 windows x86 arch:x86
5ff19431a44150ff70bd597c04242f6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
SelectObject
CreateCompatibleDC
DeleteObject
SetBkColor
SetBkMode
kernel32
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
CreateProcessA
GetEnvironmentStrings
GetVersion
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
LockResource
GetCurrentProcessId
SizeofResource
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
FindFirstFileW
CompareStringA
GlobalFree
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GlobalLock
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
LoadLibraryW
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetEnvironmentVariableA
RtlUnwind
ole32
CoUninitialize
CoCreateInstance
CoInitialize
user32
EndPaint
SetForegroundWindow
PostQuitMessage
ReleaseDC
SendMessageA
InvalidateRect
IsWindowVisible
GetSysColor
MessageBoxA
GetFocus
EndDialog
GetDesktopWindow
ClientToScreen
GetDlgItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
GetSubMenu
RegisterClassA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
DestroyWindow
GetClientRect
UnregisterClassA
GetDC
DispatchMessageA
IsWindow
SetWindowPos
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 620KB - Virtual size: 617KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ