Static task
static1
Behavioral task
behavioral1
Sample
b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b.exe
Resource
win10v2004-20240508-en
General
-
Target
b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b
-
Size
256KB
-
MD5
95ba05a96788367e1c42f2cf6e3e2b68
-
SHA1
6198757b11c3e6a3916af156704682a635dd8dde
-
SHA256
b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b
-
SHA512
ea2f0bba33e80ba108a772c32c926609febf4e145b6141baefb2fa9fffd10d6443fc2fa31398759062fb79d7e608fd9409327b74d6a0e332f6a0c635c1e7d198
-
SSDEEP
3072:dQGVEDIjTKOx56MIoXjrUQE9dUIVZnngGdQc8MgZOULg1l+6PeCk2BBkZ4/NrOb4:ddLTXIeoQQrgGdh8yUL+GDh6NrGhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b
Files
-
b95a482c55ea9823f8df9a9edf3e574f8156bde9e947f8d0d64b36135486917b.exe windows:1 windows x86 arch:x86
66fc2d61840f173209048a5ce0fb81d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreatePatternBrush
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetBkColor
GetCurrentPositionEx
GetDeviceCaps
GetNearestColor
GetObjectA
GetPixel
GetStockObject
GetTextColor
GetTextExtentPointA
GetTextMetricsA
LineTo
MoveToEx
Rectangle
SelectObject
SetBkColor
SetROP2
SetStretchBltMode
SetTextColor
StretchBlt
TextOutA
UnrealizeObject
kernel32
CloseHandle
CreateEventA
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FlushFileBuffers
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
LoadLibraryA
MultiByteToWideChar
ReadConsoleInputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteFile
user32
AppendMenuA
BeginPaint
BringWindowToTop
CallWindowProcA
CharUpperA
CheckMenuItem
ClientToScreen
CopyRect
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeleteMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawMenuBar
DrawTextA
EnableMenuItem
EndDialog
EndPaint
EnumChildWindows
FillRect
FrameRect
GetCapture
GetClassInfoA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetFocus
GetKeyState
GetMenuItemCount
GetMenu
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetParent
GetPropA
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindow
InflateRect
InsertMenuA
IntersectRect
InvalidateRect
IsChild
IsIconic
IsRectEmpty
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
LoadStringA
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
SetCursor
SetDlgItemTextA
SetDoubleClickTime
SetFocus
SetMenu
SetPropA
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
ShowOwnedPopups
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
WindowFromPoint
wsprintfA
Sections
AUTO Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ