Static task
static1
Behavioral task
behavioral1
Sample
b2e14f728e48d5e8af9ab549f2acbfc43d5658cef45d3ab5995f692faadba93d.exe
Resource
win7-20240903-en
General
-
Target
b2e14f728e48d5e8af9ab549f2acbfc43d5658cef45d3ab5995f692faadba93d.exe
-
Size
217KB
-
MD5
81df241f83c6b3e132aced3674cc04a2
-
SHA1
f92df37b08ede45fdfd9783b8d141e6096910e8e
-
SHA256
b2e14f728e48d5e8af9ab549f2acbfc43d5658cef45d3ab5995f692faadba93d
-
SHA512
4351f8d226e4c451fc2b29fd690b0fa91dd9400c702fea234d1bf334b3ce8668d9a997861eb41e57ef109b07bc7273ca0e3d706a339fb205e988e0703e53ce44
-
SSDEEP
3072:dJrbZyR5YUyyvY/RjQLBvBt0M1qCWzJP0ruTTBaClHpspom7ffrAmpK:dJrbZyi/WLBf0dJ5TTBZbspom7bXU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2e14f728e48d5e8af9ab549f2acbfc43d5658cef45d3ab5995f692faadba93d.exe
Files
-
b2e14f728e48d5e8af9ab549f2acbfc43d5658cef45d3ab5995f692faadba93d.exe.exe windows:4 windows x86 arch:x86
744b0f4715420f3c98b04fa9c853621c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FindResourceW
GetComputerNameA
LoadLibraryExW
lstrcpyA
CloseHandle
lstrlenA
CreateProcessA
GetModuleHandleA
SetLastError
PulseEvent
FindClose
GetCurrentThreadId
GetCurrentDirectoryA
CreateFileW
HeapCreate
Sleep
LocalFree
GetCommandLineA
UnmapViewOfFile
user32
GetCaretPos
DispatchMessageA
DrawMenuBar
CallWindowProcA
GetDlgItem
CreateWindowExA
CreateIcon
GetDC
IsWindow
CheckRadioButton
SetFocus
FillRect
DrawEdge
rsaenh
CPSignHash
CPGenKey
CPDecrypt
CPDeriveKey
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
socwnqh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE