Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230220-en
General
-
Target
HEUR-Trojan.Win32.Generic-2d100eaab9afe1c84ee5a642603cbd5ee5a12246a08466b5fea84924b918be26
-
Size
93KB
-
MD5
cc882e0f288b8996bfa66cda9a27e137
-
SHA1
e5686d807ada9e7e953dd2a125fdaf5be958375b
-
SHA256
2d100eaab9afe1c84ee5a642603cbd5ee5a12246a08466b5fea84924b918be26
-
SHA512
1ca90e5cfb054e53c360f6487a7d21eaf5c372671533158b710348064be884b434806d8791587fef64bda589c3d25fb816d0140772502eba6a9fd9aec46a8e42
-
SSDEEP
1536:MJ0w26d/QOooPT+UVwTATBsBiqd07lrsGYJihHS9xa57t4bq4BHcT2MUJ:d6d/j/Vw8TwM7Z8iY9o7t4bq4B8TlUJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-2d100eaab9afe1c84ee5a642603cbd5ee5a12246a08466b5fea84924b918be26
Files
-
HEUR-Trojan.Win32.Generic-2d100eaab9afe1c84ee5a642603cbd5ee5a12246a08466b5fea84924b918be26.exe windows x86
73c3d26f4599deff8889757649842d95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
GetLocalTime
LoadLibraryA
OpenMutexA
LocalAlloc
LockResource
DeviceIoControl
WaitForMultipleObjects
GetOEMCP
GetModuleHandleA
CreateMutexA
IsDebuggerPresent
WriteProfileStringW
CompareStringA
QueryPerformanceFrequency
FatalAppExitA
TlsAlloc
DeleteFileW
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA
GetStringTypeW
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
GetStartupInfoA
RtlUnwind
HeapReAlloc
HeapAlloc
IsValidCodePage
GetACP
EnterCriticalSection
GetTickCount
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
RtlMoveMemory
FlushFileBuffers
GlobalUnlock
lstrcmpW
ExitThread
CompareStringW
GetEnvironmentVariableA
GetOverlappedResult
CreateFileW
GetTimeZoneInformation
GetSystemDirectoryA
WriteConsoleW
LeaveCriticalSection
CreateEventA
Sleep
InitializeCriticalSectionAndSpinCount
DecodeSystemPointer
FormatMessageA
GetSystemTimeAsFileTime
SetEvent
WaitForSingleObject
QueryPerformanceCounter
LoadResource
FindResourceW
SetEndOfFile
GetProfileIntW
GetCPInfo
MapViewOfFile
GetStringTypeA
SetFilePointer
FindFirstFileW
FindResourceA
GetFileSize
CreateFileA
GetDateFormatW
HeapSize
ExitProcess
user32
SetWindowPlacement
GetMessageA
TranslateAcceleratorW
ScreenToClient
SetActiveWindow
CreateDialogParamA
OpenDesktopA
GetMessageW
ClientToScreen
IsIconic
DrawTextW
MsgWaitForMultipleObjects
DrawTextA
SetMenuItemBitmaps
SetForegroundWindow
DialogBoxParamW
GetParent
EndPaint
RegisterClassA
GetWindow
MoveWindow
DispatchMessageW
RegisterClassExA
AttachThreadInput
UnhookWinEvent
DrawTextExW
GetMenuCheckMarkDimensions
SendMessageA
RegisterWindowMessageA
DrawFocusRect
IsDialogMessageA
TranslateMessage
LoadAcceleratorsW
ChildWindowFromPoint
GetMenu
LoadIconW
GetWindowPlacement
OffsetRect
GetWindowTextA
TrackPopupMenuEx
CheckMenuRadioItem
InvalidateRect
SetCursorPos
GetWindowLongW
PeekMessageW
PeekMessageA
EnableMenuItem
CharUpperW
EndDialog
GetDesktopWindow
GetCursorPos
LoadStringW
ShowWindow
GetSysColorBrush
IsDlgButtonChecked
IsWindow
PostMessageA
DispatchMessageA
SetProcessDefaultLayout
ReleaseCapture
GetDlgItemTextW
SetDlgItemTextW
SetClipboardData
WinHelpW
SetDlgItemTextA
GetWindowThreadProcessId
DeleteMenu
gdi32
EndDoc
GetObjectA
GetTextExtentPointA
SetMapMode
CreateCompatibleDC
DeleteObject
SetBkMode
CreateDCW
SetAbortProc
StretchBlt
GetDeviceCaps
SetTextColor
EnumFontsW
SetWindowExtEx
GetTextExtentPoint32A
EndPage
GetTextMetricsW
winspool.drv
OpenPrinterA
ClosePrinter
OpenPrinterW
comdlg32
ChooseColorA
GetSaveFileNameA
GetFileTitleW
FindTextW
PrintDlgExW
ReplaceTextW
PrintDlgA
ChooseFontW
ChooseFontA
advapi32
RegSetValueExW
QueryServiceStatus
StartServiceA
InitializeSecurityDescriptor
RegQueryValueExA
IsTextUnicode
DeleteService
OpenServiceA
shell32
Shell_NotifyIconA
ShellAboutW
shlwapi
StrStrA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ