Static task
static1
Behavioral task
behavioral1
Sample
125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f.exe
Resource
win10v2004-20240226-en
General
-
Target
125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f
-
Size
25KB
-
MD5
b35c16610d5241b8d558a4b1be9a2984
-
SHA1
d57eba19e4cceecea9dc17665c338734e25096ed
-
SHA256
125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f
-
SHA512
f657f17a11beca1f89f7b516ad1f39da955e10a0e90ca665d39fe573bad1d3ae921df230c0395fef63a4ae630318bd65baf8c651a51f466b534f4ce4c0b9c73f
-
SSDEEP
384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSQaTkOeVO0/pA5lSwp8wwtBwi:+aP8yDSxLD2nOyaPb5aTd+/arSW8rwi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f
Files
-
125d46e945b9ab50c174c34ee9a108f7529eafaf3521f6c20b6d6c87c16ef65f.exe windows:5 windows x86 arch:x86
2a71d4f31a0049abe53363fda443e30e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipAlloc
kernel32
HeapFree
FindResourceA
LoadResource
SizeofResource
LockResource
GetProcessHeap
HeapAlloc
CreateFileW
WriteFile
CloseHandle
lstrcatW
OutputDebugStringW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
LoadLibraryA
user32
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
InvalidateRect
PostQuitMessage
SendMessageW
GetMessageW
wvsprintfW
EndPaint
FillRect
GetClientRect
BeginPaint
DispatchMessageW
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ