Static task
static1
Behavioral task
behavioral1
Sample
9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e.exe
Resource
win10v2004-20230915-en
General
-
Target
9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e
-
Size
9.1MB
-
MD5
763d1727e39ee272f6b45850169ecb20
-
SHA1
f3a732795a898c29b8eb0c430a7bbf4aab0c8d20
-
SHA256
9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e
-
SHA512
944d87d4d480cffbc202f205f5861b99008f35746c1e1a677b8f613c5c86931034d3d0e6962e040cef336355ddb7a0544a90e6aeed1d4d954861c7595df724e8
-
SSDEEP
196608:5sfdDV5CaBefl8L+CVhFtKq5WUlA2UvEu1aybkfE5j1so:urCg821kq5WUA5EKR3uo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e
Files
-
9bebcf2641eb63e0d627ec9ce77295f53d3d61fa2bc5d13041a5794aa5eb692e.exe windows:4 windows x86
497b209ec072a715f33938c4998692f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCurrentDirectoryA
MultiByteToWideChar
FreeResource
GetLastError
lstrcmpiA
GetProcessHeap
GetVersionExA
FindResourceW
GetCommandLineA
HeapAlloc
lstrlenW
lstrlenA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
WriteFile
DeleteFileA
HeapFree
SetCurrentDirectoryA
CreateProcessA
GetSystemDirectoryA
lstrcatA
GetUserDefaultLangID
WaitForSingleObject
lstrcpyA
CreateMutexA
GetSystemDefaultLangID
GetTempPathA
VirtualFree
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapCreate
VirtualAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CloseHandle
ExitProcess
LCMapStringA
WideCharToMultiByte
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringW
GetProcAddress
LoadLibraryA
user32
LoadStringA
MessageBoxW
MessageBoxA
LoadStringW
GetKeyboardLayoutList
UnloadKeyboardLayout
UpdateWindow
BeginPaint
CreateIconFromResource
LoadIconA
DialogBoxParamA
DialogBoxIndirectParamA
DialogBoxParamW
DialogBoxIndirectParamW
ShowWindow
CreateDialogParamA
DrawIcon
DestroyIcon
EndPaint
CreateDialogIndirectParamA
CreateDialogParamW
CreateDialogIndirectParamW
GetSysColor
GetWindowLongA
SetWindowLongA
BringWindowToTop
GetDC
CallWindowProcA
LoadBitmapA
GetCursorPos
ScreenToClient
GetDlgItem
SendMessageW
SendMessageA
PeekMessageA
GetClientRect
FillRect
GetSystemMetrics
SetWindowPos
PostMessageA
EndDialog
DestroyWindow
SetWindowTextW
SetWindowTextA
DrawFocusRect
InflateRect
ReleaseDC
gdi32
TextOutA
SetBkMode
SelectObject
SetTextColor
CreateFontW
DeleteObject
CreateFontA
DeleteDC
BitBlt
CreateSolidBrush
GetObjectA
CreateCompatibleDC
TextOutW
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoInitialize
CoCreateInstance
imm32
ImmGetIMEFileNameA
ImmIsIME
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ