Static task
static1
Behavioral task
behavioral1
Sample
afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe.exe
Resource
win10v2004-20241007-en
General
-
Target
afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe
-
Size
106KB
-
MD5
25a0e8a436c83bdde9ff97ca51be9238
-
SHA1
62f997e0dcbd9582b13be4400b8b5a4357ebbc4c
-
SHA256
afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe
-
SHA512
a40ec883fc4e070e6dc5d1a58a387f55f1642776e2c36a84941647260da878ff7a52ba08b5f29df10b54b2f40e4e929d669473734305d139e5b8601b103c2ebb
-
SSDEEP
3072:8H8nEnElpKBQ+m52N8OeliVGuW0ntUPqw3R7kmbDD:NnEnElpKi+m52NhGp0tUSkRfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe
Files
-
afa94e2bbee9e081c932c23695fe64afe46b29d566e9e1833522084986c89bbe.exe windows:4 windows x86 arch:x86
ab6b2946f75a66424dcf3e39d710ad79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindowVisible
IsChild
GetWindow
BeginPaint
DrawTextA
GetMenu
IsRectEmpty
DefFrameProcA
CreatePopupMenu
AdjustWindowRectEx
GetDesktopWindow
RemovePropA
EndPaint
ClientToScreen
SetWindowLongW
GetMessagePos
LoadKeyboardLayoutA
SetWindowsHookExA
GetSysColorBrush
CheckMenuItem
DrawAnimatedRects
GetIconInfo
KillTimer
GetMenuItemInfoA
OffsetRect
LoadStringA
GetLastActivePopup
GetScrollRange
GetSystemMenu
CallNextHookEx
GetScrollInfo
CharNextW
EnumChildWindows
GetCapture
ActivateKeyboardLayout
CreateMenu
SetFocus
DestroyWindow
CharToOemA
DrawIcon
SetPropA
GetFocus
GetMenuStringA
GetClipboardData
SetWindowPos
IntersectRect
LoadCursorA
GetKeyboardLayoutList
DestroyCursor
CreateWindowExA
MsgWaitForMultipleObjects
MessageBoxA
CharLowerA
GetKeyState
SetTimer
SendMessageA
GetTopWindow
GetActiveWindow
ScreenToClient
SetWindowPlacement
GetKeyNameTextA
EqualRect
SetCapture
UnhookWindowsHookEx
GetMenuItemCount
GetCursorPos
ScrollWindow
InsertMenuA
ShowWindow
GetSysColor
EnableWindow
DeleteMenu
FrameRect
UnregisterClassA
GetCursor
CharNextA
SetScrollInfo
IsWindow
EmptyClipboard
GetClassInfoA
ShowScrollBar
SendMessageW
ReleaseDC
CreateIcon
CallWindowProcA
SystemParametersInfoA
GetKeyboardType
GetWindowLongW
GetClientRect
RemoveMenu
SetForegroundWindow
SetCursor
DrawMenuBar
InvalidateRect
SetScrollRange
DispatchMessageA
PostMessageA
ShowOwnedPopups
PostQuitMessage
DrawEdge
IsWindowEnabled
CloseClipboard
LoadIconA
InsertMenuItemA
SetWindowTextA
GetWindowRect
GetDlgItem
IsDialogMessageA
IsZoomed
GetSubMenu
OpenClipboard
kernel32
ExitThread
GetVersion
GetLastError
GetProcAddress
GetFileAttributesA
GetDiskFreeSpaceA
EnterCriticalSection
GetOEMCP
LoadLibraryExA
ExitProcess
GetModuleHandleA
LocalReAlloc
GetVersionExA
ReadFile
VirtualAlloc
CloseHandle
VirtualFree
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
version
GetFileVersionInfoSizeA
gdi32
SetPixel
GetDIBits
SelectObject
Sections
CODE Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ