Static task
static1
Behavioral task
behavioral1
Sample
a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945.exe
Resource
win10v2004-20230703-en
General
-
Target
a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945
-
Size
349KB
-
MD5
47de2a9d9cd050d8ecb54bc680912cb9
-
SHA1
dd6c6d9ceb113d3af6d1426c6014437198b1ae83
-
SHA256
a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945
-
SHA512
1b0dda8d94193eb67aa0b5a28e676e3fd80a0a2844d0944a48a6269f61ccf7e38312297d083775165ab7663eeb40ecb855bdebb3169b0e16fa49fc244a580bc9
-
SSDEEP
3072:3bakdr6DZEOcs/cfUyCgmlpO1ACrUpGxCxCPIORb2I5FY4GIvq2zP7H4DUg19oi:L4Eb8uXGPUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945
Files
-
a9976bcd1414299157c5f17d1a4d5c1a23a3cf5a54ee4f9099403c436a036945.exe windows x86
6bfd30a8f07d01a30b4e68a79728f21c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageW
PropertySheetW
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_wcmdln
_wcsicmp
_winmajor
abort
calloc
exit
fprintf
free
fwrite
malloc
memmove
signal
strncmp
vfprintf
wcscat
wcscmp
wcscpy
wcsrchr
setupapi
SetupCloseInfFile
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupFindFirstLineW
SetupFindNextLine
SetupGetLineCountW
SetupGetStringFieldW
SetupOpenInfFileW
gdi32
CreateFontIndirectW
DeleteObject
GetDeviceCaps
user32
CheckDlgButton
DialogBoxParamW
EnableWindow
EndDialog
GetDC
GetDesktopWindow
GetDlgItem
GetParent
GetWindowLongW
GetWindowRect
KillTimer
LoadStringW
MessageBoxW
PostMessageW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetTimer
SetWindowLongW
SetWindowPos
SystemParametersInfoW
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 50KB - Virtual size: 49KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ