Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230220-en
General
-
Target
HEUR-Trojan.Win32.Generic-141631882d9b5771c7975f26553db94ba5527f3e6194ee4a153fc8691b44f6cf
-
Size
152KB
-
MD5
02550a2540d64faeb43115497f7a6ac6
-
SHA1
a95a772d2df1316ec667e066263f3c303c1ca983
-
SHA256
141631882d9b5771c7975f26553db94ba5527f3e6194ee4a153fc8691b44f6cf
-
SHA512
b7209310ac2ce6c7fc4b65d422f5b0211673ae2c123dbe5ce9eea964cde85a144a0f9cd0a7f101ac4dc9d09a5fb491dc203e3934170daa5124cce018a3e79e9e
-
SSDEEP
3072:uXgv9aGwL5yMK7xw6A9TVqqg8sh4b4PlDvJ0XUkbO:cgcl5KKVVq8DmP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-141631882d9b5771c7975f26553db94ba5527f3e6194ee4a153fc8691b44f6cf
Files
-
HEUR-Trojan.Win32.Generic-141631882d9b5771c7975f26553db94ba5527f3e6194ee4a153fc8691b44f6cf.exe windows x86
fa1d313674ccb8bab1ce335ecc33c377
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LocalAlloc
SetConsoleOutputCP
SetConsoleWindowInfo
GetModuleHandleA
lstrcatW
LocalSize
CloseHandle
GetThreadTimes
LocalFree
GlobalReAlloc
lstrcpyW
lstrcpyA
SetEndOfFile
ReadFile
HeapSize
LCMapStringW
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileA
SetFilePointer
HeapReAlloc
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
CreateFileW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoW
GetUserDefaultLCID
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
FindClose
GetConsoleCP
RtlUnwind
GetModuleFileNameW
WriteFile
HeapCreate
Sleep
ExitProcess
GetProcAddress
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
DecodePointer
EncodePointer
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
InterlockedIncrement
InterlockedDecrement
HeapFree
ExitThread
CreateConsoleScreenBuffer
GetLastError
GetConsoleOutputCP
GlobalUnlock
lstrlenW
MultiByteToWideChar
lstrcatA
CreateSemaphoreA
WideCharToMultiByte
GlobalAlloc
GetProcessTimes
GetWindowsDirectoryA
FormatMessageA
GetCurrentThread
GetTickCount
SetEvent
SetConsoleScreenBufferSize
GlobalLock
SetConsoleActiveScreenBuffer
GetEnvironmentVariableW
GetCurrentProcess
HeapAlloc
FreeLibrary
GetLocaleInfoA
GetCPInfo
GetProcessHeap
user32
ScreenToClient
GetWindowRect
GetWindowDC
SetCursor
DestroyWindow
RemovePropW
RegisterClassA
GetMessagePos
CharToOemA
ClientToScreen
EndPaint
IsIconic
FillRect
GetClassNameA
CloseClipboard
IsRectEmpty
EnumDisplayMonitors
ValidateRect
SetScrollInfo
GetPropW
GetDlgItemTextA
LoadCursorA
FindWindowA
SetClipboardData
EnableWindow
UpdateWindow
SetDlgItemTextW
SetWindowTextA
GetSystemMetrics
ReleaseCapture
SystemParametersInfoA
MessageBoxW
AdjustWindowRectEx
OpenClipboard
GetMenuInfo
DispatchMessageA
IsWindow
GetClassInfoA
SetMenuInfo
GetClassInfoExA
GetTopWindow
LoadImageW
SetCapture
GetPropA
LoadStringA
IsClipboardFormatAvailable
GetParent
LoadIconA
IsWindowEnabled
GetClipboardFormatNameA
wsprintfA
SetParent
FindWindowW
GetClientRect
SendMessageA
ShowCaret
EnumClipboardFormats
BeginPaint
PtInRect
GetUpdateRect
GetDC
TranslateMessage
GetMenu
GetWindowTextA
SetRect
SetWindowLongA
GetScrollInfo
MessageBoxA
InvalidateRect
GetAncestor
UnregisterClassA
GetWindowLongA
GetClipboardData
CreateWindowExA
PeekMessageA
ReleaseDC
EmptyClipboard
EndDialog
DefWindowProcA
RedrawWindow
DestroyCursor
SendDlgItemMessageW
SetLayeredWindowAttributes
ShowWindow
CreateDialogParamW
gdi32
CreatePatternBrush
GetStockObject
CreateSolidBrush
DPtoLP
CreateCompatibleDC
SelectObject
SelectPalette
SetBkColor
CreateDIBSection
SetTextColor
ExtEscape
LineTo
MoveToEx
RealizePalette
ExtTextOutW
DeleteObject
GetObjectA
SetMapMode
comdlg32
ChooseColorW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CreateBindCtx
CoInitialize
CoUninitialize
oleaut32
SysFreeString
avifil32
AVIBuildFilterA
shlwapi
SHDeleteKeyA
SHDeleteValueA
SHCreateStreamOnFileW
gdiplus
GdipDeleteBrush
GdipFree
GdipDeleteStringFormat
GdipCreateStringFormat
GdipFillRectangleI
GdipCreateFontFamilyFromName
GdipDrawString
GdipCreateFont
GdipDisposeImage
GdipAlloc
GdipCreateSolidFill
GdipDeleteFontFamily
GdipSetStringFormatAlign
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipCloneBrush
urlmon
CreateURLMoniker
CoInternetParseUrl
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ