Static task
static1
Behavioral task
behavioral1
Sample
280caf7a4553dbaa361b8ddaf306d370N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
280caf7a4553dbaa361b8ddaf306d370N.exe
Resource
win10v2004-20240704-en
General
-
Target
280caf7a4553dbaa361b8ddaf306d370N.exe
-
Size
803KB
-
MD5
280caf7a4553dbaa361b8ddaf306d370
-
SHA1
af7aacf4440364c8714f991c6a5bd7e4350f787f
-
SHA256
368e0da9e123da44d29e340844e3f708234d817247e6b043ef5291775c2c112b
-
SHA512
33273f106aaad902d8239d690e374d601b9f5353f79965f70f24007105f09a5bf343c105b0ea728ad8c8715041e6f587bf05987d159f3d674fc9d72b22557d92
-
SSDEEP
24576:XSPFzCx3H3Z57RS6I+46qSdhEunXMiPTk8:KFzCx3ZSz6qIRnXMiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 280caf7a4553dbaa361b8ddaf306d370N.exe
Files
-
280caf7a4553dbaa361b8ddaf306d370N.exe.exe windows:4 windows x86 arch:x86
23dd88597aaf02722928fae5757823e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
lstrcmpA
GlobalReAlloc
SetFileAttributesA
FreeLibrary
LoadLibraryA
GetCurrentDirectoryA
GetFileAttributesA
CompareFileTime
FindClose
FindFirstFileA
GetTempFileNameA
GetTempPathA
ExitProcess
TerminateProcess
GetCurrentProcess
ReleaseMutex
CreateMutexA
OpenMutexA
GetSystemDirectoryA
GetWindowsDirectoryA
CreateDirectoryA
SystemTimeToFileTime
CreateProcessA
MultiByteToWideChar
IsDBCSLeadByte
GetVersionExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
MoveFileExA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetShortPathNameA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
GetLocaleInfoA
GetProcessHeap
GetExitCodeProcess
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
WideCharToMultiByte
GetFileType
SetHandleCount
HeapSize
GetStdHandle
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
CreateThread
GetCurrentThreadId
ExitThread
SetEnvironmentVariableA
GetFullPathNameA
RtlUnwind
RaiseException
InterlockedExchange
SetLastError
SetFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFileTimeToFileTime
ReadFile
HeapAlloc
GlobalUnlock
VirtualProtect
GlobalAlloc
LocalSize
GlobalLock
GlobalSize
SetCurrentDirectoryA
Sleep
RemoveDirectoryA
DeleteFileA
LocalAlloc
LocalFree
lstrcatA
WriteFile
GetModuleFileNameA
GetDriveTypeA
CreateFileA
SetFilePointer
GetFileSize
CloseHandle
lstrcpynA
GlobalFree
lstrcpyA
GetTickCount
lstrlenA
GetStringTypeA
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeW
HeapFree
user32
MessageBoxA
LoadStringA
ScreenToClient
SetCursor
LoadCursorA
ExitWindowsEx
IsWindow
IsIconic
IsWindowVisible
GetSystemMetrics
GetSysColor
DestroyWindow
SystemParametersInfoA
SetPropA
MapDialogRect
DialogBoxParamA
CheckDlgButton
SetFocus
GetWindowLongA
SetTimer
GetCursorPos
GetScrollInfo
KillTimer
LoadBitmapA
SetRect
SetRectEmpty
GetSysColorBrush
GetParent
PostMessageA
IsDlgButtonChecked
SendDlgItemMessageA
EnableWindow
FillRect
GetWindowTextA
DrawTextA
CallWindowProcA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
SetWindowPos
LoadIconA
LoadImageA
RegisterClassExA
CreateWindowExA
GetSystemMenu
EnableMenuItem
PostQuitMessage
GetDC
ReleaseDC
BeginPaint
EndPaint
SendMessageA
IsZoomed
DefWindowProcA
MessageBeep
SetWindowLongA
UpdateWindow
InvalidateRect
EndDialog
GetDlgItem
GetWindowRect
MoveWindow
ShowWindow
wsprintfA
SetDlgItemTextA
SetClassLongA
SetWindowTextA
GetClientRect
PtInRect
DrawTextExA
gdi32
CreateFontA
CreateBrushIndirect
CreateRectRgn
SetTextAlign
SelectClipRgn
GetDeviceCaps
SetStretchBltMode
StretchBlt
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleDC
GetObjectA
DeleteDC
CreateCompatibleBitmap
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetBkMode
SetTextColor
TextOutA
BitBlt
SetBkColor
GetStockObject
GetTextFaceA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHChangeNotify
ShellExecuteA
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
comctl32
ord8
CreatePropertySheetPageA
ord17
PropertySheetA
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ