Static task
static1
Behavioral task
behavioral1
Sample
21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6.exe
Resource
win10v2004-20240802-en
General
-
Target
21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6
-
Size
80KB
-
MD5
70123b23c453f4ce90ec09a346eac1b2
-
SHA1
9c89ecb2f997d25c1e5d4d0064ca8134f0551a4e
-
SHA256
21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6
-
SHA512
48433557148051c8781ca542a015ad86ca1d3206d948c8537128916fc358dfd0ae0289b6a939d2e9521105b756e68f26b76c0e15a22879c8bbdf3fffe67dcf9a
-
SSDEEP
768:78QXvyTFpHrP/58ByHA/oEraNsNHPkUfb+uTld9woHBX4QXsFwAbF1PGCwwtIa:BKFF358KAAErO4PrquZwor/4+Cf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6
Files
-
21264cf736f2a5c3c78537d93d6ca218642a0ff2e6ebe4593a637860830adbc6.exe .vbs windows:4 windows x86 arch:x86 polyglot
4b88900ea6b5b8a75bcc932764801301
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
lstrcmpiA
lstrcpyA
lstrcmpA
FindClose
DeleteFileA
FindNextFileA
FindFirstFileA
lstrcatA
GetLogicalDriveStringsA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
SetFileAttributesA
MoveFileA
GetFileAttributesA
WritePrivateProfileStringA
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetLocalTime
GetTempPathA
ExpandEnvironmentStringsA
FreeLibrary
GetVersionExA
UnmapViewOfFile
MapViewOfFile
ExitProcess
SetUnhandledExceptionFilter
lstrlenA
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
Process32First
Process32Next
OpenProcess
TerminateProcess
CreateMutexA
GetLastError
CloseHandle
CreateThread
CopyFileA
Sleep
user32
wsprintfA
FindWindowExA
keybd_event
IsWindow
SendMessageA
EnumChildWindows
GetForegroundWindow
GetWindowLongA
GetClassNameA
PostMessageA
GetCursorPos
WindowFromPoint
GetWindowTextA
MessageBoxA
GetParent
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
msvcrt
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
fgets
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
??2@YAPAXI@Z
fclose
fwrite
fread
fopen
exit
fputs
sprintf
_access
strstr
printf
fseek
rand
srand
time
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
ws2_32
gethostbyname
gethostname
WSACleanup
WSAStartup
Sections
MEW Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE