Static task
static1
Behavioral task
behavioral1
Sample
2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b.exe
Resource
win10v2004-20240508-en
General
-
Target
2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b
-
Size
279KB
-
MD5
6273885bbdf42396be2d168eb3e3add5
-
SHA1
dc27b55f2013b9953c939ecec9d58835560d091e
-
SHA256
2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b
-
SHA512
7abac1e402fb0bc7cd14386d465b93291b8bef63fbc6cfcdd079861c4f4c15cf7d6503294812e56b48eab4a2d01b38c62a4b89625643961426ff999e5125a8f7
-
SSDEEP
6144:z/buMxTncb9b6t0uuA4j+8If1mk+3PSl++ZfGUP4uS4UJe41rv/:z/buMR656jugH1L+m+BUP4uF41r/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b
Files
-
2836d39c7050d861ff3004555f8fedbf4478914a37a40dac658f5c1974d4979b.exe windows:4 windows x86 arch:x86
4b81ee2e747dac86cbf875d007b416b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcA
GetClientRect
GetSystemMetrics
BeginPaint
GetSysColor
SetWindowWord
SetRect
EndPaint
RegisterClassA
UpdateWindow
GetWindowWord
LoadCursorA
OemToCharA
OemToCharBuffA
EnableWindow
SetWindowTextA
SendMessageA
ShowWindow
PostMessageA
GetLastActivePopup
KillTimer
SetTimer
GetWindowRect
DialogBoxIndirectParamA
SetCursor
SetWindowPos
GetDlgItemTextA
EndDialog
GetKeyState
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
wsprintfA
MessageBoxA
kernel32
CreateDirectoryA
_lwrite
RtlUnwind
SetFileTime
GetModuleHandleA
SetErrorMode
GetCommandLineA
GetTempPathA
GetModuleFileNameA
GetVersion
GetWindowsDirectoryA
LocalFree
GlobalUnlock
LocalAlloc
GlobalFree
GlobalAlloc
GlobalHandle
GetProfileStringA
lstrcmpiA
GlobalLock
_llseek
_lclose
WinExec
lstrlenA
_lread
_lopen
FindClose
FindFirstFileA
SetCurrentDirectoryA
_lcreat
lstrcpyA
lstrcatA
LocalFileTimeToFileTime
DosDateTimeToFileTime
gdi32
SetBkColor
SetTextAlign
GetTextExtentPoint32A
GetBkColor
SetTextColor
DeleteObject
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 147B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_winzip_ Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ