Static task
static1
Behavioral task
behavioral1
Sample
bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556.exe
Resource
win10v2004-20240426-en
General
-
Target
bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556
-
Size
142KB
-
MD5
df27b2befdfd9c378ab0b854fca32b4c
-
SHA1
a36330a80caaf4a0fd6a4d7882fe382b96b30dd0
-
SHA256
bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556
-
SHA512
62e4424d40b42c8a662a5dcf1d1e8f814191e71a7f80003b236b0d5b6937308377968a1ec21424ab3f4ff30c519b3ca86d33a81168d4997ebf60d26063f38610
-
SSDEEP
3072:vijzzvzm/Z7Uy1tVkBiyyUzGBk9VeFS43tqPJpPsiZ:qa/ZT/UKBk749ClZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556
Files
-
bdaf4612c7f291f416794630658ad7d9597736a6991b3e2150b3bb6af3f57556.exe windows:4 windows x86 arch:x86
79d5bee5c66d34951640c916b5178a3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetTempPathW
GetTickCount
LoadLibraryA
LocalAlloc
LocalFree
VirtualProtect
lstrcmpW
lstrlenW
GetFileSize
user32
GetDC
GetDlgItem
GetWindowLongW
GetWindowRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadIconW
LoadStringW
MessageBoxW
RegisterClassW
ReleaseDC
SendMessageW
SetFocus
SetWindowLongW
ShowWindow
GetClientRect
gdi32
DeleteObject
ExtTextOutW
GetDeviceCaps
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextAlign
SetTextColor
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 121KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE