Static task
static1
Behavioral task
behavioral1
Sample
2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0.exe
Resource
win10v2004-20240709-en
General
-
Target
2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0.exe
-
Size
48KB
-
MD5
20be1ace5a911137585f3c9597b632ff
-
SHA1
2b7d551146edcf9ba856db2fa02335efade9a8b3
-
SHA256
2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0
-
SHA512
ba5f443789565ee19e3d2318e135d2331e4babb917042ffb7d50f52acafc9f2ed2c5e89d00b1b735f43a33f2f6b09f8643b69f9a7fe932c20ac896346e37b5bc
-
SSDEEP
768:endlF8lGyDCGeag/mjZXkzjOm7NHXph1oPhHaG:yd+ZDC3agOjZX0OmxBoPhH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0.exe
Files
-
2bf2426f1e9557cbcf5434255072658962b1cf212251196f1337c8fe3b4a09a0.exe.exe windows:4 windows x86 arch:x86
600d0297095ed4036fa41bc4e590f208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
GetTextMetricsA
SelectObject
GetStockObject
CreateFontIndirectA
user32
DispatchMessageA
GetWindowLongA
GetKeyState
PostMessageA
CallWindowProcA
GetDC
ReleaseDC
GetSystemMetrics
SetWindowPos
GetClientRect
SendMessageA
SetWindowLongA
SetFocus
SetWindowTextA
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
LoadImageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
kernel32
TerminateProcess
FreeEnvironmentStringsA
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentStringsW
GetCurrentProcess
UnhandledExceptionFilter
WriteFile
GetStdHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
HeapDestroy
SetHandleCount
GetFileType
HeapFree
HeapCreate
VirtualFree
RtlUnwind
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ