Behavioral task
behavioral1
Sample
project5-2.exe
Resource
win10v2004-20241007-en
General
-
Target
project5-2.exe
-
Size
479KB
-
MD5
0481980472e71600fae80a864999e485
-
SHA1
3a296eb9fb50e2fc3a648bbcad459192b1be1bea
-
SHA256
27d98e91c4e9fb55f9c4aa8efca637b23562e9c113afe939319cb74329cb8ffc
-
SHA512
86bd6e844a57180d31643b961430fcb87758d3027a5560d511f4bd32ecb13e33a81edb9c1cead02b4e43aaf8ff0e5974cfe1e49acfd4c84b7a516a3852c8925b
-
SSDEEP
6144:pTNlPsSiE0grIlHAjNL7SXAtKZnbr8qz6xzS06d17GQxAAXcpGZ5wIzkyOD+lRXs:pFR0gsAjNL3tQbr8w6xely1JcXgDsLm
Malware Config
Signatures
-
Rhadamanthys family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource project5-2.exe
Files
-
project5-2.exe.exe windows:4 windows x86 arch:x86
03f91bdad97904026326fc3ace33b897
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
HeapAlloc
MulDiv
GetProcessHeap
GetStartupInfoA
user32
GetDlgCtrlID
GetScrollRange
DestroyIcon
KillTimer
DrawIcon
GetClientRect
GetScrollPos
LoadStringW
FillRect
PostMessageW
CreateIcon
ShowWindow
GetCursor
DeleteMenu
EndMenu
DrawFocusRect
BeginPaint
GetDCEx
DefMDIChildProcW
CharUpperBuffW
CreateMenu
GetScrollInfo
GetMenuItemInfoW
MsgWaitForMultipleObjectsEx
ReleaseDC
GetClassInfoExW
GetWindowTextW
DestroyWindow
EndPaint
EnableWindow
CreateWindowExW
LoadBitmapW
CreateAcceleratorTableW
DrawMenuBar
PeekMessageW
GetSystemMenu
RegisterClassW
IsDialogMessageW
IsZoomed
CopyImage
GetMenuStringW
IsIconic
ShowCaret
InsertMenuW
SetTimer
LoadCursorW
DefFrameProcW
LoadIconW
GetClassInfoW
DestroyMenu
FrameRect
DispatchMessageW
SetMenuItemInfoW
SetScrollPos
DestroyCursor
gdi32
Pie
RectVisible
StretchBlt
GetTextMetricsW
Polygon
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreatePalette
GetStockObject
CreateICW
MoveToEx
GetWindowOrgEx
CreateSolidBrush
SetAbortProc
SetTextColor
SetBkMode
RestoreDC
PolyBezierTo
RoundRect
AngleArc
CreateDCW
SetRectRgn
ole32
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
IsEqualGUID
CoInitialize
OleUninitialize
OleInitialize
oleaut32
SafeArrayGetElement
SafeArrayAccessData
VariantCopyInd
SysAllocStringLen
SysReAllocStringLen
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SysFreeString
VariantCopy
VariantInit
SafeArrayGetUBound
SafeArrayUnaccessData
VariantClear
VariantChangeType
SafeArrayPutElement
SafeArrayGetLBound
msvcrt
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
qsort
wcsrchr
memset
wcschr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ