Static task
static1
Behavioral task
behavioral1
Sample
c781af81c8996e3c7acd79c5c074cf40N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c781af81c8996e3c7acd79c5c074cf40N.exe
Resource
win10v2004-20240802-en
General
-
Target
c781af81c8996e3c7acd79c5c074cf40N.exe
-
Size
1.4MB
-
MD5
c781af81c8996e3c7acd79c5c074cf40
-
SHA1
8b52b861784266e2335163bf9a59da3de9540505
-
SHA256
e50301de35dc396be59c31e06626b4f87aef849aca8fecf973e1b6b7ab076dad
-
SHA512
f608cdab94fd3ce7d05b3aba4fad5deef9265550810b399bfa43aa2cbafe9b22d3bcc55628c920f38fddc410c056c0d87ffb8208558ed164bca8985a631cfe29
-
SSDEEP
24576:RYABSx1VZ9kqjU5dJY94SFcKd/ZzhTcldb+7+DFWYtEy53CzJg:RAza55dJpIcSfcLbm+DFWC5Sz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c781af81c8996e3c7acd79c5c074cf40N.exe
Files
-
c781af81c8996e3c7acd79c5c074cf40N.exe.exe windows:4 windows x86 arch:x86
bcf01d372829da84adfd0a96445c8407
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
GetPixel
GetDCOrgEx
SetTextColor
AddFontResourceW
ClearBitmapAttributes
CopyMetaFileA
AddFontMemResourceEx
BitBlt
GetClipBox
RestoreDC
ExcludeClipRect
ExtTextOutA
AbortPath
DeleteObject
AddFontMemResourceEx
RestoreDC
GetPixel
CloseFigure
SetTextColor
AddFontResourceExA
CopyMetaFileA
DeleteObject
BitBlt
CancelDC
GetPixel
BeginPath
GetCurrentPositionEx
GetBrushOrgEx
ExtTextOutA
ExtTextOutA
CloseMetaFile
CancelDC
GetPixel
CopyMetaFileA
SetTextColor
AbortPath
AddFontResourceTracking
RestoreDC
CloseFigure
GetBitmapBits
GetCurrentPositionEx
CreateSolidBrush
DeleteDC
AddFontResourceExA
DeleteObject
comctl32
ImageList_LoadImageW
ImageList_Copy
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_GetDragImage
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_ReplaceIcon
InitCommonControls
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_Merge
ImageList_Read
ImageList_DrawEx
ImageList_Copy
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Remove
ImageList_EndDrag
ImageList_Draw
ImageList_Destroy
ImageList_GetDragImage
ImageList_DrawIndirect
advapi32
RegEnumKeyExA
RegReplaceKeyA
RegDeleteKeyW
RegQueryValueW
RegLoadKeyA
RegEnumKeyA
RegEnumValueW
RegDeleteValueA
RegCreateKeyExA
RegDeleteValueW
RegLoadKeyA
RegGetKeySecurity
RegQueryValueW
RegCreateKeyExA
RegQueryValueA
RegEnumValueW
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
user32
AppendMenuW
AlignRects
CalcMenuBar
DrawTextW
CopyImage
GetCursor
IsWindow
InsertMenuA
CreateIcon
DialogBoxParamW
CopyIcon
LoadCursorA
AppendMenuA
GetCursor
LoadCursorA
GetMenu
GetDC
DrawTextA
DialogBoxParamA
CopyIcon
IsWindow
AppendMenuA
CopyImage
IsMenu
DrawIcon
EndDialog
GetWindowTextLengthA
LoadMenuA
EndDialog
DialogBoxParamW
CopyRect
CopyIcon
CopyImage
GetDlgItem
DrawIconEx
DrawTextA
IsMenu
GetWindowTextA
CreateIcon
GetDC
AppendMenuW
AlignRects
BlockInput
DrawTextW
EndDialog
GetWindowTextA
InsertMenuA
LoadCursorA
DialogBoxParamW
DrawIconEx
GetDC
BlockInput
GetDlgItem
GetFocus
DrawIcon
DrawTextA
CopyIcon
CalcMenuBar
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ