Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230221-en
General
-
Target
HEUR-Trojan.Win32.Generic-8cf20a0953c701b826b4c949ccc7d99d2214db3f3051d0512433bf0ed1057c4d
-
Size
153KB
-
MD5
c6bc82bc356156f884b9438f05fa3a9f
-
SHA1
cc8d9494f3a9187e84c308e9a9ec8a1c436049fa
-
SHA256
8cf20a0953c701b826b4c949ccc7d99d2214db3f3051d0512433bf0ed1057c4d
-
SHA512
3c7ac5a8e5768d05c20c64a81dc485a71fbefb8b87b438e9b7d4998a155336bda6f1260b2881266ab8a4dc8e44925b015ded8176f5f4277d4214e95dd5efdcac
-
SSDEEP
3072:Rc49V5aZ+mPqVPSom55vwMxOeqYNRQISiObO+xAxIXI+uYr:Rc4hvVPSodZeqiXTvb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-8cf20a0953c701b826b4c949ccc7d99d2214db3f3051d0512433bf0ed1057c4d
Files
-
HEUR-Trojan.Win32.Generic-8cf20a0953c701b826b4c949ccc7d99d2214db3f3051d0512433bf0ed1057c4d.exe windows x86
680e823b9c784797b13928708780e6da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
InvalidateRgn
IsDialogMessageA
InflateRect
IsWindow
CreateWindowExA
GetClientRect
InvalidateRect
ShowWindow
GetSystemMetrics
SetParent
GetPropA
CallWindowProcA
GetWindowPlacement
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
GetSysColor
ScreenToClient
SetWindowTextW
SendMessageW
GetMessageW
DispatchMessageW
PostThreadMessageW
EndDialog
SetWindowLongA
CreateDialogIndirectParamA
SetDlgItemTextA
MoveWindow
CharUpperA
LoadImageA
EndPaint
CreateDialogParamA
BeginPaint
DialogBoxIndirectParamA
CharLowerA
GetKeyboardType
LoadStringA
CharNextA
IsWindowEnabled
GetSystemMenu
DeleteMenu
FindWindowA
ChangeDisplaySettingsA
GetTabbedTextExtentA
PostQuitMessage
RegisterWindowMessageA
SetRect
EqualRect
RegisterClassA
UnregisterClassA
DefWindowProcA
LoadBitmapA
GetCapture
WinHelpA
GetClassInfoA
GetMenuItemCount
DrawFocusRect
FrameRect
PtInRect
UnionRect
GetAsyncKeyState
GetCursorPos
IsWindowUnicode
SystemParametersInfoA
IsIconic
GrayStringA
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
SetPropA
CopyRect
OffsetRect
CallNextHookEx
SetWindowsHookExA
wsprintfA
UnhookWindowsHookEx
MessageBoxA
IntersectRect
DrawFrameControl
ClientToScreen
IsWindowVisible
UpdateWindow
GetWindowRect
GetDesktopWindow
SetRectEmpty
SetCursor
ReleaseCapture
KillTimer
SetCapture
SetTimer
LoadCursorA
GetDC
ReleaseDC
LoadIconA
EnableWindow
GetWindowRgn
SetWindowRgn
GetMenu
GetSubMenu
GetMenuItemID
BringWindowToTop
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
DestroyWindow
GetWindowThreadProcessId
GetParent
SendMessageA
SetWindowPos
WaitForInputIdle
EnumWindows
GetWindowLongA
SetClipboardData
SetWindowTextA
shell32
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
SHGetFolderPathW
ole32
StringFromGUID2
OleUninitialize
OleInitialize
CoFreeAllLibraries
CoCreateInstance
CoUninitialize
CoInitialize
advapi32
RegEnumValueA
RegOpenKeyA
RegSetValueExA
RegEnumKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
gdi32
SetBkMode
CreateFontIndirectA
CreateBrushIndirect
SetBkColor
TranslateCharsetInfo
AddFontResourceA
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject
ExtCreateRegion
GetDeviceCaps
RemoveFontResourceA
SelectObject
SetTextColor
GetObjectA
comctl32
ImageList_Destroy
ImageList_Create
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
VerInstallFileA
winmm
sndPlaySoundW
winspool.drv
OpenPrinterW
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetHandleCount
GetConsoleMode
GetConsoleCP
SetStdHandle
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
lstrlenW
GetPrivateProfileIntA
CompareStringW
Sleep
ResetEvent
LockResource
LoadResource
GlobalReAlloc
GlobalHandle
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetTickCount
GetSystemInfo
GetStringTypeExA
LeaveCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
VirtualQuery
SetFileTime
GetTempPathA
lstrcpynA
GlobalUnlock
GlobalLock
RemoveDirectoryA
lstrcatA
GetVersion
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetCurrentThreadId
WideCharToMultiByte
TlsAlloc
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
ExitProcess
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
GetCurrentProcessId
GetCPInfo
GetACP
FreeResource
FormatMessageA
FindResourceA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateProcessA
CreateEventA
CompareStringA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
MulDiv
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetTimeZoneInformation
HeapReAlloc
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetEnvironmentVariableA
SetCurrentDirectoryA
ReadFile
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
GetCommandLineA
CopyFileA
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ