Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20230220-en
General
-
Target
HEUR-Trojan.Win32.Generic-d56fb2bdad7a50ab1f6ef76c67669452ed4da2bf865beafcf4956ab30bfa20fc
-
Size
92KB
-
MD5
a8c89731da50275ba0e30c4a34a02419
-
SHA1
bd1949497d61b94f26c42a62cc82c306f4ead02f
-
SHA256
d56fb2bdad7a50ab1f6ef76c67669452ed4da2bf865beafcf4956ab30bfa20fc
-
SHA512
92ddfe7d41125be3ba1e16909c232788e6f02dec07008b20c437ecc9e2abc54d02f746f3f18c443eb354dd3ca44d57bb9f37bc8c408d506f31e70aadf4f8ada5
-
SSDEEP
1536:VD5t5g4pUytAPeT+b/x/u5bmT1Sop6KLYJi/HSihpU4bq4BHVR4I:V1g4pbYx/u1Y96KL8iKibU4bq4B1R4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-d56fb2bdad7a50ab1f6ef76c67669452ed4da2bf865beafcf4956ab30bfa20fc
Files
-
HEUR-Trojan.Win32.Generic-d56fb2bdad7a50ab1f6ef76c67669452ed4da2bf865beafcf4956ab30bfa20fc.exe windows x86
29ff3580bceebe4eaa7b88297f7406be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FlushFileBuffers
RtlMoveMemory
GetStartupInfoA
FindFirstFileA
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
GlobalFree
GetLocalTime
LoadLibraryA
OpenMutexA
WriteConsoleA
GetFileType
SetConsoleCtrlHandler
LockResource
DeviceIoControl
WaitForMultipleObjects
GetOEMCP
GetModuleHandleA
CreateMutexA
IsDebuggerPresent
GetStringTypeW
WriteProfileStringW
CompareStringA
QueryPerformanceFrequency
FatalAppExitA
TlsAlloc
DeleteFileW
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA
lstrcmpW
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
HeapAlloc
IsValidCodePage
GetACP
EnterCriticalSection
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsGetValue
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
ExitThread
CompareStringW
GetEnvironmentVariableA
GetOverlappedResult
CreateFileW
GetTimeZoneInformation
GetSystemDirectoryA
WriteConsoleW
GetTimeFormatW
LeaveCriticalSection
CreateEventA
Sleep
InitializeCriticalSectionAndSpinCount
DecodeSystemPointer
GetSystemTimeAsFileTime
GetTickCount
SetEvent
WaitForSingleObject
QueryPerformanceCounter
LoadResource
FreeLibrary
FindResourceW
SetEndOfFile
GetProfileIntW
GetCPInfo
MapViewOfFile
GetStringTypeA
SetFilePointer
FindFirstFileW
FindResourceA
GetFileSize
CreateFileA
GetDateFormatW
ExitProcess
user32
CreateDialogParamA
OpenDesktopA
GetMessageW
RegisterClassExA
DispatchMessageW
MoveWindow
GetWindow
RegisterClassA
CharNextW
IsIconic
IsChild
PostMessageW
SetActiveWindow
MsgWaitForMultipleObjects
DrawTextA
SetMenuItemBitmaps
SetForegroundWindow
DeleteMenu
GetFocus
DialogBoxParamW
GetParent
AttachThreadInput
DrawTextExW
GetMenuCheckMarkDimensions
SendMessageA
RegisterWindowMessageA
ScreenToClient
TranslateAcceleratorW
GetMessageA
SetWindowPlacement
ClientToScreen
EndPaint
DrawTextW
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
ChildWindowFromPoint
GetMenu
LoadIconW
GetWindowPlacement
OffsetRect
GetWindowTextA
TrackPopupMenuEx
CheckMenuRadioItem
SetCursorPos
GetWindowLongW
PeekMessageW
PeekMessageA
EnableMenuItem
GetDlgItem
CharUpperW
EndDialog
GetDesktopWindow
GetCursorPos
LoadStringW
ShowWindow
GetSysColorBrush
IsDlgButtonChecked
CreateDialogParamW
IsWindow
PostMessageA
DispatchMessageA
SetProcessDefaultLayout
ReleaseCapture
GetDlgItemTextW
SetDlgItemTextW
SetClipboardData
WinHelpW
SetDlgItemTextA
CheckMenuItem
GetWindowThreadProcessId
UnhookWinEvent
gdi32
EndPage
GetTextMetricsW
GetTextExtentPoint32A
EnumFontsW
SetTextColor
GetDeviceCaps
StretchBlt
SetAbortProc
CreateDCW
SetBkMode
DeleteObject
CreateSolidBrush
GetObjectA
GetTextExtentPointA
CreateCompatibleDC
SetMapMode
winspool.drv
OpenPrinterA
ClosePrinter
OpenPrinterW
comdlg32
ChooseColorA
GetFileTitleW
FindTextW
PrintDlgExW
ReplaceTextW
ChooseFontW
PrintDlgA
advapi32
RegSetValueExW
AdjustTokenPrivileges
QueryServiceStatus
StartServiceA
InitializeSecurityDescriptor
RegQueryValueExA
IsTextUnicode
DeleteService
OpenServiceA
shell32
Shell_NotifyIconA
CommandLineToArgvW
ShellAboutW
shlwapi
StrStrA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ