Static task
static1
Behavioral task
behavioral1
Sample
0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e.exe
Resource
win10v2004-20240508-en
General
-
Target
0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e
-
Size
652KB
-
MD5
3161ea3360c07921282de47ab00fcb08
-
SHA1
a1a9971080ffac25925b1ddb4fa165c5a1abfd0a
-
SHA256
0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e
-
SHA512
679a1c4176ee358cc0353a562f699844aff3a2ce3aa36563a21d3b173d6571b45e699bc5113d7dd690f33f4752738994ac3f0fc686a7a6a93ec2a22ff7041a21
-
SSDEEP
12288:HJjG3FnJ/Itj3x9yxurzdnFWtLXLHR5pbG3RnCheB/eZkY:1yJItjvyxoW1HR549CU8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e
Files
-
0b2840911cdd609e206552414da65e2da7ec2772f8abe281d1d7379b033e0c4e.exe windows:5 windows x86 arch:x86
687cf61f00538aef4bda7e55b7b30bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetModuleHandleW
GlobalFlags
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
Sleep
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
lstrcatA
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
ExitProcess
VirtualFree
VirtualProtect
VirtualAlloc
WriteFile
GetCurrentThreadId
GetEnvironmentStrings
CreateProcessA
LocalFree
LocalAlloc
GetCurrentDirectoryA
lstrcpyA
FreeLibrary
MultiByteToWideChar
QueryPerformanceCounter
GetModuleFileNameA
FlushViewOfFile
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetErrorMode
WritePrivateProfileStringA
DeleteFileA
GlobalFree
GlobalAlloc
FindClose
lstrcmpA
FindFirstFileA
CloseHandle
CreateFileA
CreateDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
SetLastError
GlobalUnlock
GlobalLock
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleMode
GetConsoleCP
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedExchange
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
LCMapStringA
LCMapStringW
GetCurrentThread
FreeEnvironmentStringsA
HeapCreate
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
FormatMessageA
GetTickCount
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
GetCurrentProcessId
FlushFileBuffers
GetCurrentProcess
InterlockedIncrement
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GetStdHandle
user32
IsMenu
ClientToScreen
CheckMenuItem
CopyRect
GetWindowPlacement
SetWindowPos
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
MessageBoxA
SetMenu
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
DispatchMessageA
GetLastActivePopup
GetWindowTextA
GetWindowTextLengthA
GetFocus
RemovePropA
GetPropA
GetClassNameA
GetCapture
WinHelpA
LoadIconA
SetWindowTextA
IsWindowEnabled
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetActiveWindow
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
UnregisterClassA
SetMenuItemInfoA
SetRect
GrayStringA
DrawTextExA
TabbedTextOutA
DrawTextA
IsWindow
GetClassLongA
LoadCursorA
GetSysColorBrush
DestroyMenu
wsprintfA
GetSysColor
GetWindowRect
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
SetForegroundWindow
SetWindowLongA
GetSystemMetrics
ReleaseDC
GetDC
SystemParametersInfoA
SetPropA
RegisterWindowMessageA
IsIconic
PtInRect
GetKeyState
ModifyMenuA
RegisterClipboardFormatA
GetForegroundWindow
GetWindow
GetClientRect
GetSubMenu
GetCursorPos
EnableMenuItem
GetMenuItemID
GetMenuState
GetMenuItemInfoA
PostMessageA
SetCursor
LoadBitmapA
GetMenuItemCount
GetParent
ShowWindow
InflateRect
IsWindowVisible
EnableWindow
SendMessageA
GetWindowLongA
gdi32
ExtTextOutA
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
SelectObject
DeleteDC
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
PtVisible
RectVisible
TextOutA
Escape
advapi32
RegOpenKeyExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
shell32
ShellExecuteA
oleaut32
VariantClear
VariantChangeType
VariantInit
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
PathFindFileNameA
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 395KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ