Static task
static1
Behavioral task
behavioral1
Sample
322abe8a92d3036bc1dfbbab48c34cf0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
322abe8a92d3036bc1dfbbab48c34cf0N.exe
Resource
win10v2004-20240709-en
General
-
Target
322abe8a92d3036bc1dfbbab48c34cf0N.exe
-
Size
208KB
-
MD5
322abe8a92d3036bc1dfbbab48c34cf0
-
SHA1
35d627d12dc6b324ebd6b3fb1f7cdd08f2655095
-
SHA256
dd72518211970f535902e1a976e46ebf95519fa86c98ee207ae655b97ed89c97
-
SHA512
5fab77c69b02ee2b8edf002e37b10ce6edfb1a89a2da5023fb637c19d6e6407598d51adb48faccf733c12db48c223096da0e41b9acec853975dfcb7cbae7da8d
-
SSDEEP
6144:jJRDxRqdSqQts6iRZsTZuDbhivDVDN8zqF3:jcjQKUZigDVJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 322abe8a92d3036bc1dfbbab48c34cf0N.exe
Files
-
322abe8a92d3036bc1dfbbab48c34cf0N.exe.exe windows:4 windows x86 arch:x86
91c8557273d46cefa6ad80b57deb236d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
SetCalendarInfoA
FindResourceA
lstrcmp
GetDateFormatW
SetCurrentDirectoryA
CopyFileA
DisconnectNamedPipe
LoadLibraryA
SuspendThread
GetProcAddress
user32
PostQuitMessage
SetFocus
RemoveMenu
EnumChildWindows
MessageBoxIndirectW
GetDC
LoadMenuW
GetActiveWindow
LoadMenuA
EnumDesktopWindows
RegisterWindowMessageA
GetWindowTextW
EnumDesktopsW
GetClassNameA
LoadCursorA
GetWindowTextA
GetTopWindow
LoadBitmapA
GetMenuInfo
GetCapture
wvsprintfA
SetCursorPos
IsDlgButtonChecked
GetMenuStringW
CheckMenuRadioItem
DestroyWindow
SetActiveWindow
AppendMenuW
GetDlgItemTextW
UpdateLayeredWindow
IsChild
CreateDialogParamW
GetMenuStringA
ShowCaret
GetKeyState
GetCaretPos
GetCapture
CreateWindowExA
CheckDlgButton
GetIconInfo
CopyImage
WinHelpA
CopyIcon
DialogBoxParamA
GetDC
gdi32
GetGlyphIndicesA
GetColorAdjustment
GetTextCharset
GetTextColor
CreatePen
SetSystemPaletteUse
SwapBuffers
GetICMProfileA
GetFontUnicodeRanges
StartPage
CreateDCA
SetWinMetaFileBits
advapi32
RegCreateKeyExA
RegDeleteKeyW
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyW
shell32
SHGetDataFromIDListA
SHGetFileInfoW
shlwapi
PathRemoveBlanksW
UrlHashA
PathIsDirectoryEmptyW
StrStrNIW
StrCmpNA
PathIsContentTypeA
PathAppendA
PathRemoveBackslashA
PathSkipRootA
PathGetDriveNumberW
PathSearchAndQualifyW
ole32
CoUninitialize
inetcomm
HrGetLastOpenFileDirectory
MimeEditIsSafeToRun
EssSecurityLabelDecodeEx
CreateSMTPTransport
HrDoAttachmentVerb
MimeOleGetDefaultCharset
MimeOleSMimeCapsFull
oledlg
OleUIChangeSourceA
OleUIUpdateLinksW
OleUIConvertW
OleUIObjectPropertiesA
OleUIUpdateLinksA
OleUIBusyA
OleUIPasteSpecialA
OleUIEditLinksW
crypt32
CryptStringToBinaryA
PFXExportCertStore
CertCreateContext
CertGetCRLFromStore
CertFindChainInStore
CertFindAttribute
RegOpenHKCUKeyExU
I_CertUpdateStore
CertGetIntendedKeyUsage
CertDuplicateCRLContext
CryptMsgControl
CryptBinaryToStringA
Sections
.ZYkKE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.peSRE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ig Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LI Size: 3KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ