WndProc
Static task
static1
Behavioral task
behavioral1
Sample
cdb4bcd3dbb7207ff661dc1d39d5b130N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cdb4bcd3dbb7207ff661dc1d39d5b130N.exe
Resource
win10v2004-20240802-en
General
-
Target
cdb4bcd3dbb7207ff661dc1d39d5b130N.exe
-
Size
112KB
-
MD5
cdb4bcd3dbb7207ff661dc1d39d5b130
-
SHA1
8c6e2b2254ab81897fd20c91c3face721b600124
-
SHA256
1d26592f16af7c869e504e3d50cc330bf349e5759d990d2514711da85b5a9876
-
SHA512
26cb5dfb05732c319d0d2d1a3ff84f9d215eade0a02a72f3e6053f4259b36fee9a7bdd2713a9976cc977e45ec5e647f530ee852589904d13ace41946c7bd34bb
-
SSDEEP
1536:zFH/+kgLscnwASLqZaaYqUbeS0HZ7RV6qPCD:z1+QNvLqrQbfMfq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdb4bcd3dbb7207ff661dc1d39d5b130N.exe
Files
-
cdb4bcd3dbb7207ff661dc1d39d5b130N.exe.exe windows:1 windows x86 arch:x86
f3092f709b9af9edfcc0ccc2b1e10bd6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lclose
SetCurrentDirectoryA
GlobalAlloc
_lcreat
SetFileAttributesA
ExitProcess
GlobalFree
_lread
_lopen
GetTickCount
GetDriveTypeA
GetProcAddress
_llseek
GetModuleHandleA
GetModuleFileNameA
GlobalSize
_lwrite
CreateDirectoryA
user32
PostQuitMessage
PeekMessageA
MessageBoxA
GetMessageA
GetKeyboardState
GetCursorPos
FindWindowA
LoadIconA
GetAsyncKeyState
DispatchMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
TranslateMessage
ToAscii
SystemParametersInfoA
ShowWindow
SetCursorPos
UpdateWindow
WaitMessage
SetCursor
ddraw
DirectDrawCreate
dsound
DirectSoundCreate
gdi32
GetStockObject
winmm
midiOutSetVolume
midiOutOpen
midiOutGetVolume
midiOutClose
mciSendCommandA
Exports
Exports
Sections
CODE Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 48KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 120B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE