Static task
static1
Behavioral task
behavioral1
Sample
c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5.exe
Resource
win10v2004-20240802-en
General
-
Target
c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5
-
Size
1.4MB
-
MD5
49146407932f11f0c1e0b0094f3666c4
-
SHA1
a802304ae8e58fe9c0237b902a838c6f7375e20f
-
SHA256
c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5
-
SHA512
d20bcc69b3dccf22e5c4099521e2fcbf7d97b531ce7f57524c6b2512250ca5b22cc0ed82736a5bb05b4956b689b974ba5d1e9fa28ff2855883cbc66afc489f69
-
SSDEEP
24576:UcpMMMMMMMMMMMMOHHH59J9P9J9P9J9P9J91RKrA++++++++++++++++++++++V9:XpMMMMMMMMMMMMOHHHOA+++++++++++I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5
Files
-
c69826065bfdeeebf60e0f0e9066fc64c753d54d72e83bf7383c7b2eb736b7d5.exe windows:4 windows x86 arch:x86
8ed47ca6cf742318da8df866884e96c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
kernel32
GetModuleFileNameA
CreateMutexA
GetWindowsDirectoryA
LoadLibraryA
LockResource
LoadResource
FindResourceA
RemoveDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetFileAttributesA
CopyFileA
GetCommandLineA
LCMapStringA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetVersionExA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
CreateProcessA
Sleep
GetExitCodeProcess
SetCurrentDirectoryA
lstrcmpA
MultiByteToWideChar
GetLastError
FindNextFileA
lstrcmpiA
GetFileSize
GlobalAlloc
WriteFile
GlobalFree
lstrcatA
DeleteFileA
SetFilePointer
CreateFileA
ReadFile
CloseHandle
FindFirstFileA
FindClose
lstrcpyA
CreateDirectoryA
WideCharToMultiByte
lstrlenA
SetUnhandledExceptionFilter
LCMapStringW
user32
GetWindowTextA
IsWindowVisible
SetDlgItemTextA
CheckDlgButton
CheckRadioButton
GetDlgItem
IsDlgButtonChecked
EndDialog
SetWindowPos
SendDlgItemMessageA
SetWindowLongA
GetClientRect
CopyRect
DrawTextA
DrawFocusRect
InvalidateRect
SetRect
CallWindowProcA
CharNextA
SetWindowTextA
MessageBoxA
GetSystemMetrics
GetClassNameA
EnableWindow
BeginPaint
LoadBitmapA
EndPaint
SetFocus
PostQuitMessage
DestroyWindow
DialogBoxParamA
PeekMessageA
EnumWindows
DefWindowProcA
GetDC
ReleaseDC
FindWindowA
SetForegroundWindow
LoadIconA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
LoadCursorA
RegisterClassA
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
GetSysColor
gdi32
CreatePen
MoveToEx
LineTo
StretchBlt
SetBkMode
SetTextColor
GetStockObject
DeleteDC
DeleteObject
CreateFontIndirectA
CreateCompatibleBitmap
AddFontResourceA
Rectangle
BitBlt
SelectObject
CreateCompatibleDC
CreateSolidBrush
advapi32
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
shell32
SHGetFolderPathA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ