Static task
static1
Behavioral task
behavioral1
Sample
30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2.exe
Resource
win10v2004-20240802-en
General
-
Target
30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2
-
Size
59KB
-
MD5
e9ecf0b6736d1191bac560fa4d027411
-
SHA1
12594e6810ee4b0ccc9cc0938bf299d223c177b1
-
SHA256
30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2
-
SHA512
578c04cbb4a7ab7575c03402c5e07d19c126b8d948593e1bc9e4e3965d37d17fd1d8eaa80aebd864e6938a21374cb1f13fcadd35c185991c82cdc48e9918e640
-
SSDEEP
384:Ilb3wFfelV5BgoC0XvxBRL35164WN1oRKvSGceV7kReIGUC75u1qogkhgnuIbkuI:I+zo/v9351jWNUcYeeReRUCtBkhgnfGP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2
Files
-
30d6e69ab16e9b6061d3450cfee147bae2d46bca03d5ed72e73fafd5a3e9eaf2.exe windows:4 windows x86 arch:x86
ad52cbbec354beca7d7fafd8b0a1b53c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
comctl32
InitCommonControls
comdlg32
ChooseFontW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
Ellipse
GetStockObject
GetTextExtentPointW
LineTo
MoveToEx
OffsetRgn
OffsetWindowOrgEx
SelectObject
SetBkColor
SetBkMode
SetTextColor
SetViewportOrgEx
TextOutW
kernel32
GetCommandLineA
GetDateFormatW
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetTimeFormatW
shell32
ShellAboutW
ucrtbase
__p___argc
__p___argv
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
cos
exit
sin
user32
BeginPaint
CheckMenuItem
CheckMenuRadioItem
CreateWindowExW
DefWindowProcW
DispatchMessageW
EnableMenuItem
EndPaint
FillRect
GetDC
GetMessageW
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
PostQuitMessage
RegisterClassW
ReleaseDC
SetMenu
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ