Static task
static1
Behavioral task
behavioral1
Sample
abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39aN.exe
Resource
win10v2004-20241007-en
General
-
Target
abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39aN
-
Size
115KB
-
MD5
22fb1effe657fdec7217ae3bc0f15220
-
SHA1
64a17329164707a4f80b99d19c69e0e85ab05d62
-
SHA256
abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39a
-
SHA512
8895c15d1088936136d74cb5f1f72e28030672578fb9c2723c75696d8f66a4032494b006b8f2cf06c6fa621b8b664619110502afd4ee228d53bbf320714aaabe
-
SSDEEP
1536:eDgHjfj+dKnf84NSWx6KFSnx3VQ9MDJ1MIhOziaRsC4bnX3Cghaq3i6E/eagVfxC:DD73fZcx3iDQPau3Jha4agVfxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39aN
Files
-
abbc3510b23037c9cf9904677f6885d8c24a5469a26e5691baa3dae863d3c39aN.exe windows:4 windows x86 arch:x86
58244cc6adc83bd4baaa3821e2bcb356
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetSystemMetrics
GetParent
GetDesktopWindow
GetDC
CharNextA
gdi32
GetStockObject
RestoreDC
CreateFontIndirectA
CreatePalette
GetTextMetricsA
SaveDC
SetTextColor
CreateSolidBrush
SelectPalette
CreateCompatibleDC
SetMapMode
SetTextAlign
GetDeviceCaps
GetObjectA
LineTo
SetStretchBltMode
RectVisible
DeleteObject
DeleteDC
GetPixel
kernel32
GetWindowsDirectoryA
GetCommandLineA
RemoveDirectoryA
lstrcmpA
QueryPerformanceCounter
DeleteFileA
RemoveDirectoryW
FindClose
lstrcmpiW
CopyFileA
GetModuleHandleA
GlobalFindAtomA
lstrlenA
lstrcmpiA
GetSystemTime
lstrlenW
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ