Static task
static1
Behavioral task
behavioral1
Sample
a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed.exe
Resource
win10v2004-20240226-en
General
-
Target
a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed
-
Size
279KB
-
MD5
b580f2ce5725433684b10e7f1d38bc30
-
SHA1
2a58dc59adfa299255feb151a486aa5fdedb44c1
-
SHA256
a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed
-
SHA512
32711b082ad361f2250badaba4fa8d49714c56826abac20899a3cdb50f98b9aa89d3622917b011aeee7a926c71aefab5853898249aa557bdaa6c721c6b435f0e
-
SSDEEP
3072:9yeRK9KjPQtNa15aF9/NkTR+PL9eGPnzdDzwd8/B3eb0TUM:0eRUtQOn9eGPnz9Z/ZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed
Files
-
a40ab5f1dd54771eeca4f67c424e730325a8ea2ac814e34a1d4e1b439d68a2ed.exe windows:4 windows x86 arch:x86
09cbdadfe19bc9456aa0b7ae5d425d14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetFileAttributesA
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
HeapSize
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
GetStdHandle
HeapDestroy
LocalFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
lstrlenA
InterlockedDecrement
lstrcatA
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
WritePrivateProfileStringA
GetProcessVersion
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersion
LocalReAlloc
TlsSetValue
TlsGetValue
GlobalReAlloc
EnterCriticalSection
LoadResource
GlobalHandle
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
HeapCreate
LocalAlloc
GetVersionExA
GlobalFlags
lstrcmpiA
lstrcpynA
GetLastError
SetLastError
lstrcpyA
SizeofResource
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
MulDiv
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
SetHandleCount
GetProfileStringA
GetExitCodeProcess
CreateProcessA
user32
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
SetWindowTextA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CharUpperA
LoadStringA
DestroyMenu
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
PostQuitMessage
ShowOwnedPopups
SetCursor
MessageBoxA
SetMessageQueue
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
LoadCursorA
ReleaseCapture
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
PostMessageA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
DispatchMessageA
PeekMessageA
GetFocus
IsDialogMessageA
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScreenToClient
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
SetFocus
AdjustWindowRectEx
EqualRect
LoadIconA
RegisterClassA
IntersectRect
ExcludeUpdateRgn
IsWindowUnicode
CharNextA
OffsetRect
InflateRect
DefDlgProcA
DrawFocusRect
UnregisterClassA
ShowCaret
HideCaret
gdi32
SetTextColor
GetObjectA
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
GetDeviceCaps
CreatePen
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
CreateDIBitmap
CreateCompatibleDC
BitBlt
PatBlt
SetBkColor
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
shell32
DragQueryFileA
DragFinish
comctl32
ord17
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ