Static task
static1
Behavioral task
behavioral1
Sample
2.2.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2.2.exe
Resource
win10v2004-20240426-en
General
-
Target
2.2.exe
-
Size
383KB
-
MD5
3c1e3215acc69f06f044802ed4695333
-
SHA1
ea34a6bad04bc5a1fcb494668347cd302557f327
-
SHA256
34de53b43c32e3ed5231a57683103acad1aebeef08309cf8e770c27acc90e4e7
-
SHA512
82ed2edbb7286aac00b946f7f4c79e59079994fe8385e961abd1291440fdf26e14c724943eaabebb517e921ece4b384b9d50905898d71f2efaa427be7082d2d0
-
SSDEEP
3072:2UANSGQV9/2Q2ZE1nEDBRjDds0FmgMUIpipKfHEZji+jbqLvInpmU9tqx2sFnU59:QsqE1nEDPlTFmkpckZW8qbIZpsX9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2.2.exe
Files
-
2.2.exe.exe windows:5 windows x64 arch:x64
cd339696c8e5d1a47aa69598eea5f5d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHBrowseForFolderA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
SHGetPathFromIDListA
Shell_NotifyIconA
ws2_32
listen
accept
select
getsockname
ntohs
WSACloseEvent
WSACreateEvent
WSAEventSelect
gethostbyname
bind
WSAIoctl
ntohl
inet_ntoa
getservbyname
gethostname
htonl
setsockopt
WSACleanup
WSAStartup
getaddrinfo
socket
connect
recvfrom
recv
freeaddrinfo
sendto
WSAGetLastError
closesocket
WSAAsyncSelect
getpeername
getnameinfo
inet_addr
send
htons
WSASetLastError
comctl32
InitCommonControlsEx
iphlpapi
GetIpNetTable
SendARP
GetAdaptersAddresses
DeleteIpNetEntry
kernel32
MultiByteToWideChar
GetFullPathNameW
GetCurrentDirectoryW
HeapReAlloc
OutputDebugStringW
SetStdHandle
LCMapStringW
CompareStringW
GetCommandLineA
GetCommandLineW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetModuleFileNameA
lstrlenA
lstrcatA
lstrcpyA
lstrcmpiA
lstrcpynA
OutputDebugStringA
GetEnvironmentVariableA
lstrcmpA
SetLastError
GetCurrentProcess
CreateMutexA
ReleaseMutex
Sleep
GetLastError
CloseHandle
SetProcessWorkingSetSize
GetFullPathNameA
GetVersion
GetLocalTime
CreateProcessA
ReadFile
ReleaseSemaphore
WriteFile
WaitForSingleObject
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
CreateFileA
DeleteFileA
GetFileSize
CreateSemaphoreA
SetEnvironmentVariableA
SetThreadPriority
SetFilePointer
GetCurrentThread
WideCharToMultiByte
FlushFileBuffers
GetCurrentThreadId
GetTickCount
ResetEvent
GetSystemTime
WaitForMultipleObjects
SetEvent
CreateEventA
CreateThread
SetFilePointerEx
GlobalAlloc
GlobalUnlock
GlobalLock
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
GetDateFormatA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCPInfo
HeapFree
HeapAlloc
GetTimeZoneInformation
ExitProcess
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
FreeLibraryAndExitThread
ResumeThread
ExitThread
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
GetEnvironmentStringsW
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
GetConsoleCP
GetConsoleMode
GetFileSizeEx
HeapSize
ReadConsoleW
SetEndOfFile
GetThreadPriority
user32
GetFocus
GetWindowLongA
SetWindowLongA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
DialogBoxParamA
GetClassInfoA
RegisterClassA
GetDesktopWindow
GetClassLongPtrA
DrawIcon
SetFocus
DialogBoxIndirectParamA
CreateWindowExA
SystemParametersInfoA
MessageBeep
wvsprintfA
RedrawWindow
MoveWindow
MapDialogRect
InvalidateRect
GetWindow
GetSystemMetrics
SetDlgItemTextA
SetWindowTextA
IsWindow
SetTimer
DestroyIcon
CallWindowProcA
GetWindowTextA
SetClassLongPtrA
MessageBoxA
GetSysColor
DefWindowProcA
SendDlgItemMessageA
LoadIconA
CheckMenuItem
UnregisterClassA
SetWindowLongPtrA
FindWindowA
SetForegroundWindow
ChildWindowFromPoint
EnableWindow
GetDC
ReleaseDC
GetSystemMenu
GetWindowRect
DestroyWindow
IsWindowVisible
SetWindowPos
ShowWindow
GetTopWindow
GetDialogBaseUnits
CreateDialogParamA
AppendMenuA
GetClientRect
PostMessageA
GetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
LoadMenuA
TrackPopupMenu
wsprintfA
GetSubMenu
DestroyMenu
GetDlgItem
GetWindowLongPtrA
GetParent
GetCursorPos
SendMessageA
EndDialog
KillTimer
gdi32
SetBkColor
SetTextColor
LPtoDP
GetTextExtentPoint32A
GetTextMetricsA
ExtTextOutA
comdlg32
GetOpenFileNameA
advapi32
RegOpenKeyExA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ