Static task
static1
Behavioral task
behavioral1
Sample
cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7.exe
Resource
win10v2004-20240704-en
General
-
Target
cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7
-
Size
807KB
-
MD5
184c921dbd87fbfb0b464013486fc918
-
SHA1
72cf436cc3470cb0e50b0b54d844d833502e2b1b
-
SHA256
cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7
-
SHA512
0e8afc6c303b2200fe69954e9b0afdaff204609dadf2a9c533bfecd81b722196951e5643e1f9220a2ff577692d95d30fa7a1b4085d8c0190b186df7ffc03105a
-
SSDEEP
12288:2jWZ7ct0TAHVLKuOV5exX6QLkl1Or5eftOBK0ZtQ1BoZ97lV5cig:2jWZ7fcHLOVc16QYLOrcFOBRQk9z5a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7
Files
-
cd9d5bb213c6950d76663c7644e3bb15de6ab758246b31b0fa88409f063da5d7.exe windows:4 windows x86 arch:x86
f6bdee9192f2c4b46c6ad39f2b2d9a34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
srand
_purecall
memset
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_getcwd
strchr
time
memcmp
memcpy
strncmp
strcmp
atol
rand
_getdrive
_strcmpi
calloc
free
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2
_chdir
strstr
strcat
_chdrive
_mkdir
mpr
WNetConnectionDialog
WNetGetUserA
kernel32
CloseHandle
LocalFileTimeToFileTime
_llseek
DosDateTimeToFileTime
GetFileTime
CreateFileA
_lopen
_lwrite
lstrcmpiA
GetVersion
SetErrorMode
DeviceIoControl
WriteFile
SetFilePointer
ReadFile
GetLastError
GetDiskFreeSpaceA
_lread
OpenFile
LoadLibraryA
GetWindowsDirectoryA
GetTickCount
GetModuleFileNameA
FreeResource
LockResource
LoadResource
FindResourceA
DeleteFileA
lstrcatA
lstrcpynA
GetTempPathA
GetStartupInfoA
lstrlenA
lstrcpyA
_lclose
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalHandle
GlobalFree
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
FreeLibrary
GetProcAddress
SetFileTime
GetModuleHandleA
user32
SetCursor
EnableMenuItem
GetSystemMenu
SetWindowPos
GetSystemMetrics
SetWindowLongA
IsIconic
GetParent
SetFocus
MessageBeep
DestroyWindow
OemToCharA
CharToOemA
DrawFocusRect
LoadCursorA
GetDesktopWindow
GetWindowRect
LoadStringA
CreateDialogParamA
DrawTextA
GetClientRect
GetWindowLongA
EndPaint
BeginPaint
DefWindowProcA
RegisterClassA
DispatchMessageA
TranslateMessage
CharUpperA
MessageBoxA
IsDialogMessageA
DestroyIcon
SetWindowTextA
GetIconInfo
KillTimer
SetTimer
CreateWindowExA
LoadBitmapA
CheckDlgButton
PostMessageA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
InvalidateRect
GetScrollRange
CharLowerA
DialogBoxParamA
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
wsprintfA
ShowWindow
EnableWindow
EndDialog
GetDlgItemTextA
GetDlgItem
SendMessageA
GetDC
SetRect
GetSysColor
PeekMessageA
FillRect
ReleaseDC
CreateIconIndirect
gdi32
DeleteDC
DeleteObject
CreateSolidBrush
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetTextMetricsA
ExtTextOutA
SetTextColor
GetBkColor
BitBlt
SetBkMode
GetStockObject
SetBkColor
comdlg32
GetSaveFileNameA
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ