Static task
static1
Behavioral task
behavioral1
Sample
65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1.exe
Resource
win10v2004-20240226-en
General
-
Target
65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1
-
Size
65KB
-
MD5
758250a7b3e1431b6d5bc72c9837a441
-
SHA1
e2be8db60f5f3afa24ebcad55c47a77c76ac2366
-
SHA256
65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1
-
SHA512
c19bac973dcfd728ca75daa5c7823595f953aed340a34d9c9354e5860f3b52020b850d11e247c751bf752aef09977cc615bd77fe3c9278b82c72a9d0bab3a891
-
SSDEEP
768:33Yq0vUjJ51gH8TnkAEe53QYuEDFAnA1tLRNk2djaYoCMHosO/B33r3:33YS1hjWY3QY2uBNdSCMGh3r3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1
Files
-
65117f2e02acf5954f69ad7da21d54a723f5aa70ceaa7527583dccbce65db8e1.exe windows:5 windows x86 arch:x86
5f259a07286d0de03289b72c296c1693
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipBitmapGetPixel
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStream
GdipDeleteGraphics
GdipCreateFromHDC
kernel32
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetProcessHeap
HeapAlloc
ReadFile
CloseHandle
HeapFree
WriteFile
LoadLibraryW
GetProcAddress
HeapReAlloc
FreeLibrary
LoadLibraryA
GetModuleFileNameW
FindResourceW
LoadResource
SizeofResource
LockResource
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetLastError
GetCurrentThreadId
GetCurrentProcess
IsProcessorFeaturePresent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
FillRect
GetClientRect
BeginPaint
InvalidateRect
PostQuitMessage
SendMessageW
EndPaint
gdi32
SetPixel
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ