Static task
static1
Behavioral task
behavioral1
Sample
ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f.exe
Resource
win10v2004-20240419-en
General
-
Target
ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f
-
Size
136KB
-
MD5
a0958ccbee2b05152f3ca7c9611a065d
-
SHA1
adfc6a51cc06f01c52b26d4e641b163d14861ac0
-
SHA256
ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f
-
SHA512
2e1617cd5a82e6bf06137df961aab4659f06f79df389ed2b93833c821ab628e43bcf9f9d09fac0e41a6339386255704ba39208bc16ecadc548b8550f0e4d0e82
-
SSDEEP
3072:Ofd/ZS2Oykz4nBBu2pWcdg5ClncXIHBk:yPHTS4nBMoWqbcXIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f
Files
-
ae11391aa4529c138735c4e418d175bef9ee89bda00a8f5764f94a5e59b6175f.exe windows:4 windows x86 arch:x86
7b44b56e4e56b82a3bca789444cb14a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
comdlg32
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
gdi32
CreateFontA
GetTextExtentPoint32A
EndDoc
EndPage
DeleteObject
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
SetTextColor
CreateHatchBrush
CreateSolidBrush
CreatePen
IntersectClipRect
SelectClipRgn
ExtTextOutW
SetBkMode
GetTextExtentPoint32W
GetTextMetricsA
CreateFontIndirectA
Rectangle
SetPixel
Polyline
Ellipse
GetStockObject
Polygon
SetMapMode
StartDocA
StartPage
GetDeviceCaps
user32
LoadIconA
MessageBeep
TranslateMessage
BeginPaint
IntersectRect
EndPaint
PostQuitMessage
ReleaseCapture
SetCapture
DefWindowProcA
CreateMenu
AppendMenuA
SetMenu
GetKeyboardState
EnableMenuItem
CheckMenuItem
DrawMenuBar
CheckDlgButton
DefDlgProcA
LoadCursorA
RegisterClassA
EnableWindow
ShowWindow
IsDialogMessageA
DispatchMessageA
GetMessageA
SetForegroundWindow
DestroyWindow
SendMessageA
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
GetWindowLongA
CreateWindowExA
SetWindowLongA
SystemParametersInfoA
GetClientRect
AdjustWindowRectEx
GetMenu
SetRect
GetMenuItemCount
GetMenuItemRect
UnionRect
SetWindowPos
GetWindowRect
WinHelpA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetTimer
KillTimer
OffsetRect
InvalidateRect
GetSysColor
GetDC
ReleaseDC
SetWindowTextA
MessageBoxA
DestroyMenu
kernel32
RaiseException
SetEndOfFile
InterlockedExchange
RtlUnwind
CreateFileA
SetStdHandle
HeapSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ReadFile
WriteFile
CloseHandle
LCMapStringW
LCMapStringA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
MulDiv
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
FormatMessageA
GetLastError
GetLocalTime
MultiByteToWideChar
GetTickCount
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ