Static task
static1
Behavioral task
behavioral1
Sample
2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e.exe
Resource
win10v2004-20240704-en
General
-
Target
2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e.exe
-
Size
32KB
-
MD5
1dbab84cd9bb45f587b793544005c110
-
SHA1
ea71046f801a1195c2ee46a8d2bdbaddab6b99c7
-
SHA256
2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e
-
SHA512
215de4b1c5f82144e7405ac3a08b075b31471510f8c21c22fb44320fdb8f46bd237f9feaacf274032a560b22b3f7572dd5ede12b72f0bcc7e2585ecdc1400043
-
SSDEEP
384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8xjUN8CltL:Q6K7fJKFiQTrLjdTLTW8xw6qL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e.exe
Files
-
2d70165a31a74d465e3cb13fd778a71630936eafd0640a64dc56b388ab66425e.exe.exe windows:4 windows x86 arch:x86
93ef196156d6da1d4462ba7d424ca7b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA
gdi32
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ