Static task
static1
Behavioral task
behavioral1
Sample
056e13cc9dd35aa5b60c1d138ea46710N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
056e13cc9dd35aa5b60c1d138ea46710N.exe
Resource
win10v2004-20240709-en
General
-
Target
056e13cc9dd35aa5b60c1d138ea46710N.exe
-
Size
1.1MB
-
MD5
056e13cc9dd35aa5b60c1d138ea46710
-
SHA1
404bafab3f31e9ffb69ae1232d98aea102763e59
-
SHA256
c33f92de5bffb9d1b202f3598361f64ecba4f7b8766aed7c5b97ccf1d1f9b454
-
SHA512
ab6bc1ff9f71d9eb941b9fe0110609caf1993933238bd760943faef92071e1e2fee5c3e4ec27477c6c0980082415fb050e886ab22140005a1abd43131ce2df99
-
SSDEEP
24576:+jWZ7fhlCyxYwE2PzMop9uIWDHX0XLUOTWGOQbidq82Xnujg50zfBBCIK0:T5fhlCyeOPztPuIWDAKQbidqkjhfBBy0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056e13cc9dd35aa5b60c1d138ea46710N.exe
Files
-
056e13cc9dd35aa5b60c1d138ea46710N.exe.exe windows:4 windows x86 arch:x86
f6bdee9192f2c4b46c6ad39f2b2d9a34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
srand
_purecall
memset
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_getcwd
strchr
time
memcmp
memcpy
strncmp
strcmp
atol
rand
_getdrive
_strcmpi
calloc
free
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2
_chdir
strstr
strcat
_chdrive
_mkdir
mpr
WNetConnectionDialog
WNetGetUserA
kernel32
CloseHandle
LocalFileTimeToFileTime
_llseek
DosDateTimeToFileTime
GetFileTime
CreateFileA
_lopen
_lwrite
lstrcmpiA
GetVersion
SetErrorMode
DeviceIoControl
WriteFile
SetFilePointer
ReadFile
GetLastError
GetDiskFreeSpaceA
_lread
OpenFile
LoadLibraryA
GetWindowsDirectoryA
GetTickCount
GetModuleFileNameA
FreeResource
LockResource
LoadResource
FindResourceA
DeleteFileA
lstrcatA
lstrcpynA
GetTempPathA
GetStartupInfoA
lstrlenA
lstrcpyA
_lclose
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalHandle
GlobalFree
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
FreeLibrary
GetProcAddress
SetFileTime
GetModuleHandleA
user32
SetCursor
EnableMenuItem
GetSystemMenu
SetWindowPos
GetSystemMetrics
SetWindowLongA
IsIconic
GetParent
SetFocus
MessageBeep
DestroyWindow
OemToCharA
CharToOemA
DrawFocusRect
LoadCursorA
GetDesktopWindow
GetWindowRect
LoadStringA
CreateDialogParamA
DrawTextA
GetClientRect
GetWindowLongA
EndPaint
BeginPaint
DefWindowProcA
RegisterClassA
DispatchMessageA
TranslateMessage
CharUpperA
MessageBoxA
IsDialogMessageA
DestroyIcon
SetWindowTextA
GetIconInfo
KillTimer
SetTimer
CreateWindowExA
LoadBitmapA
CheckDlgButton
PostMessageA
GetDlgItemInt
IsDlgButtonChecked
SetDlgItemInt
InvalidateRect
GetScrollRange
CharLowerA
DialogBoxParamA
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
wsprintfA
ShowWindow
EnableWindow
EndDialog
GetDlgItemTextA
GetDlgItem
SendMessageA
GetDC
SetRect
GetSysColor
PeekMessageA
FillRect
ReleaseDC
CreateIconIndirect
gdi32
DeleteDC
DeleteObject
CreateSolidBrush
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetTextMetricsA
ExtTextOutA
SetTextColor
GetBkColor
BitBlt
SetBkMode
GetStockObject
SetBkColor
comdlg32
GetSaveFileNameA
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ