Static task
static1
Behavioral task
behavioral1
Sample
fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d.exe
Resource
win10v2004-20240704-en
General
-
Target
fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d
-
Size
132KB
-
MD5
aabdfd4a368a96ff093f1c7f8f9e5216
-
SHA1
f8439b75f377595eafe8359cd528bf916877458e
-
SHA256
fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d
-
SHA512
29b0e878fb8c022b98fcd44ae19ca3e313549c627badaa9ac62315d98ce49451ec4bb584522f6f3a76fe857a381646cc15f8b9daa92d11741b9ae8700c29ddc8
-
SSDEEP
1536:EPaPkLyYq0xP9MwDs9MHTVLGt3+LAnsE6Q0TYcojkupEShOLbDNyQtrG+y8MO:EiPkLyYqm9Mf98RAIysq0EQDQQxXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d
Files
-
fd46af5c829c27f4f2192c030292a7d194d88a1a17bffa2a6bfddfeeffe6868d.exe windows:4 windows x86 arch:x86
7651052e0cda07014dc44278bc9355fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
comdlg32
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
gdi32
CreateFontA
EndDoc
EndPage
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
SetTextColor
CreateHatchBrush
CreateSolidBrush
CreatePen
IntersectClipRect
SelectClipRgn
TextOutA
SetBkMode
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
Rectangle
SetPixel
Polyline
Ellipse
GetStockObject
Polygon
SetMapMode
StartDocA
StartPage
user32
LoadIconA
CreateMenu
AppendMenuA
SetMenu
MessageBeep
TranslateMessage
BeginPaint
IntersectRect
EndPaint
PostQuitMessage
SetCapture
DefWindowProcA
GetKeyboardState
CheckDlgButton
DefDlgProcA
LoadCursorA
RegisterClassA
SetWindowLongA
EnableWindow
ShowWindow
IsDialogMessageA
DispatchMessageA
GetMessageA
SetForegroundWindow
DestroyWindow
CreateWindowExA
SendMessageA
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
GetWindowLongA
SystemParametersInfoA
GetClientRect
AdjustWindowRectEx
GetMenu
SetRect
GetMenuItemCount
GetMenuItemRect
UnionRect
SetWindowPos
GetWindowRect
WinHelpA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetTimer
KillTimer
OffsetRect
InvalidateRect
GetSysColor
GetDC
ReleaseDC
SetWindowTextA
MessageBoxA
ReleaseCapture
kernel32
InterlockedExchange
SetEndOfFile
RtlUnwind
CreateFileA
SetStdHandle
HeapSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
SetFilePointer
GetOEMCP
GetACP
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ReadFile
WriteFile
CloseHandle
LCMapStringW
LCMapStringA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
MulDiv
GetModuleFileNameA
LoadLibraryA
GetProcAddress
LocalFree
FormatMessageA
GetLastError
GetLocalTime
GetTickCount
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ