Static task
static1
Behavioral task
behavioral1
Sample
271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc.exe
Resource
win10v2004-20241007-en
General
-
Target
271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc
-
Size
80KB
-
MD5
73e91b1ab6d5a198be59978c1d8a4e78
-
SHA1
c5b2d5036fc1531ed367cdff3f6c1feab1e72feb
-
SHA256
271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc
-
SHA512
18bce3147e442b9655ec875cecf763081aae4e60c65642c8f53c884fd244553a4284163d05eabe353a660883a2231b647a21d1bc3381276a914bd619a226dab8
-
SSDEEP
768:78QXvyTFpHrP/58ByHA/oEraNsNHPkUfb+uTld9woHBX4QXsFwAbF1PGCwwtIa:BKFF358KAAErO4PrquZwor/4+Cf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc
Files
-
271aa013b7689e38eb76cead1f94936c13f0c528980b09b3450ee4e72f457cbc.exe .vbs windows:4 windows x86 arch:x86 polyglot
4b88900ea6b5b8a75bcc932764801301
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
lstrcmpiA
lstrcpyA
lstrcmpA
FindClose
DeleteFileA
FindNextFileA
FindFirstFileA
lstrcatA
GetLogicalDriveStringsA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
SetFileAttributesA
MoveFileA
GetFileAttributesA
WritePrivateProfileStringA
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetLocalTime
GetTempPathA
ExpandEnvironmentStringsA
FreeLibrary
GetVersionExA
UnmapViewOfFile
MapViewOfFile
ExitProcess
SetUnhandledExceptionFilter
lstrlenA
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
Process32First
Process32Next
OpenProcess
TerminateProcess
CreateMutexA
GetLastError
CloseHandle
CreateThread
CopyFileA
Sleep
user32
wsprintfA
FindWindowExA
keybd_event
IsWindow
SendMessageA
EnumChildWindows
GetForegroundWindow
GetWindowLongA
GetClassNameA
PostMessageA
GetCursorPos
WindowFromPoint
GetWindowTextA
MessageBoxA
GetParent
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegDeleteKeyA
msvcrt
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
fgets
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
??2@YAPAXI@Z
fclose
fwrite
fread
fopen
exit
fputs
sprintf
_access
strstr
printf
fseek
rand
srand
time
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
ws2_32
gethostbyname
gethostname
WSACleanup
WSAStartup
Sections
MEW Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE