Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230220-en
General
-
Target
HEUR-Trojan.Win32.Generic-730c76b5761c02c65956dbd4afb6b44a946c76f51b0f8e039a0076ff098bc9b5
-
Size
87KB
-
MD5
28f486318ef8e9ec7f0017dde41acfcc
-
SHA1
eb8035d5633fd044151c50a9acdfc51db93e88a1
-
SHA256
730c76b5761c02c65956dbd4afb6b44a946c76f51b0f8e039a0076ff098bc9b5
-
SHA512
22a3a575fd9f8facc97efb615aeae178237027878a59f154a1878a9562551f990906b9cb18a343bea9dafc42c1fe5f14656d27ab8494a407bfbf62862b654a59
-
SSDEEP
1536:1mqfkQPtw8Ku5Ekkkkas+ocyNGlQ0lwp+N55JXXHhaXd:1mF05BSOG0znHhQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-730c76b5761c02c65956dbd4afb6b44a946c76f51b0f8e039a0076ff098bc9b5
Files
-
HEUR-Trojan.Win32.Generic-730c76b5761c02c65956dbd4afb6b44a946c76f51b0f8e039a0076ff098bc9b5.exe windows x86
58f903234a4a141f90c3139fba6f2055
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
GetSystemDirectoryA
LCMapStringA
FlushFileBuffers
WriteFile
GetUserDefaultUILanguage
GetCPInfo
LCMapStringW
GetCurrentProcess
lstrcmpW
GlobalReAlloc
GetFileAttributesW
GetConsoleOutputCP
lstrcpynW
VirtualAlloc
GetLocaleInfoA
SearchPathA
IsDebuggerPresent
LocalSize
HeapSize
CompareStringW
SetUnhandledExceptionFilter
GetCommandLineW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
CreateFileMappingA
SetEnvironmentVariableA
TlsFree
FindFirstFileW
WriteConsoleA
GetStartupInfoA
RaiseException
IsValidCodePage
WaitForMultipleObjects
InitializeCriticalSection
GetTimeZoneInformation
LocalUnlock
GetModuleHandleA
TlsAlloc
GetFileInformationByHandle
FreeEnvironmentStringsW
GetModuleFileNameA
CreateEventW
GlobalLock
Sleep
GlobalAlloc
LoadLibraryW
GetHandleInformation
SetEvent
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
HeapReAlloc
HeapAlloc
GetOEMCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
UnhandledExceptionFilter
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetStdHandle
ExitProcess
GetModuleHandleW
GetCommandLineA
GetCurrentActCtx
DebugSetProcessKillOnExit
GlobalUnlock
OpenMutexA
DeleteFileW
CreateFileA
GetCommConfig
DisableThreadLibraryCalls
GetLastError
GlobalDeleteAtom
FindAtomA
DefineDosDeviceW
LoadLibraryExA
DeviceIoControl
EraseTape
CreateMutexA
GetCurrentProcessId
GetProcAddress
DecodePointer
FindResourceW
GetACP
user32
LoadIconW
GetMenuState
SetFocus
BeginPaint
GetWindowRect
GetSubMenu
GetDlgCtrlID
SetWindowPos
ScreenToClient
InsertMenuItemA
MsgWaitForMultipleObjects
CheckMenuItem
TranslateMessage
LoadStringW
UpdateWindow
DrawTextA
DispatchMessageA
CheckDlgButton
TranslateAcceleratorA
DestroyMenu
GetMessageA
RegisterWindowMessageA
IsZoomed
GetDlgItemTextA
TrackPopupMenu
SetMenu
SetWinEventHook
SendMessageA
CheckMenuRadioItem
OpenClipboard
SetWindowPlacement
InflateRect
SetActiveWindow
GetDlgItemTextW
WinHelpW
LoadStringA
CharNextW
ChildWindowFromPoint
DrawFocusRect
MessageBoxA
SendMessageW
GetWindowThreadProcessId
InvalidateRgn
GetCursorPos
SetCursorPos
FindWindowA
GetSystemMenu
gdi32
ExtTextOutA
SetViewportExtEx
CreateFontIndirectA
SelectObject
AbortDoc
LPtoDP
GetTextExtentPointA
StartDocA
CreateSolidBrush
comdlg32
GetFileTitleW
advapi32
InitializeSecurityDescriptor
IsTextUnicode
RegDeleteValueA
DeleteService
RegQueryValueExW
OpenProcessToken
RegCreateKeyW
RegOpenKeyA
shell32
ShellAboutW
Shell_NotifyIconA
DragFinish
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ