Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230220-en
General
-
Target
HEUR-Trojan.Win32.Generic-49d02b2fa986ddd5d3b54a3b3d517ce19e8da6c8873c67345c09b6915840fe7a
-
Size
160KB
-
MD5
7325ab9ad5634c719a09355628a7c032
-
SHA1
189d2b65b20c037ff685cfcc9613d040db5f34e4
-
SHA256
49d02b2fa986ddd5d3b54a3b3d517ce19e8da6c8873c67345c09b6915840fe7a
-
SHA512
1487a7de18753e1b552929e12e95c1885b8328bbde747e686950c6cc5c7197a57a2f18cd8ad9074a170ec17dd4e9a4426e406ca023b2a49debace9062b1fa5fd
-
SSDEEP
3072:KVPPdNW8Fe4Kv34hRltVRRlDU5YR6S6DJsJfHIN87WDdjRIx2jOwhKXKXK:5z4hRpRRlvDGCJfHiVdjT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-49d02b2fa986ddd5d3b54a3b3d517ce19e8da6c8873c67345c09b6915840fe7a
Files
-
HEUR-Trojan.Win32.Generic-49d02b2fa986ddd5d3b54a3b3d517ce19e8da6c8873c67345c09b6915840fe7a.exe windows x86
a33dbabc4c51777abf9b2320245c369d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractIconA
StrCmpNW
StrStrA
SHInvokePrinterCommandA
ShellAboutA
SHQueryRecycleBinW
SHUpdateImageA
DllRegisterServer
ExtractAssociatedIconW
FindExecutableW
SHGetMalloc
SHBrowseForFolderA
SHFree
ShellMessageBoxA
kernel32
GetCurrentProcessId
GetSystemTime
GetThreadPriority
GetTickCount
GetTimeFormatW
LoadLibraryA
WaitForSingleObject
GetCurrentThread
GetProcAddress
GetWindowsDirectoryW
GetModuleFileNameW
CreateNamedPipeA
FindResourceA
GetCurrentDirectoryW
GetStringTypeExW
ReadConsoleA
InterlockedExchange
odbctrac
TraceSQLBindCol
TraceSQLError
TraceSQLFetch
TraceSQLConnect
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ