Static task
static1
Behavioral task
behavioral1
Sample
36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae.exe
Resource
win10v2004-20230915-en
General
-
Target
36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae
-
Size
92KB
-
MD5
37da6c0f1d1ce2bb5cbfd1a82ab661bc
-
SHA1
5b6136e6f7c77ca593736777d796e8874fb4189e
-
SHA256
36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae
-
SHA512
17f0e5dc405aac3cc19097c69899e2b86559ddfd4e3f929861c6f1f6984513121e42ae16d4673806ebcde0df9b07b39516c1759419bb5fd43cd293a3c76bc235
-
SSDEEP
768:avp7v/qs8s36GJo4J6fGP4rKC3htcd72oS+6iOUpfl5+KqvK4LmphiUyk6/0gsBF:Ip7vkfGgrK+idyoJTpfl5opyqPl+ADc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae
Files
-
36101f32f9c460f0826b20a55ecfb40c89c5d38863803b10f14ae36e166073ae.exe windows:5 windows x86
69856aa24ce4fe0643e403a78f7699e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadAcceleratorsA
KillTimer
IsIconic
IsDlgButtonChecked
InvalidateRgn
IntersectRect
GetMonitorInfoA
LoadCursorA
GetCursorInfo
GetWindowRect
GetWindowLongA
GetSubMenu
GetMessageA
GetIconInfo
LoadIconA
LoadImageA
LoadMenuA
ClientToScreen
FillRect
TranslateMessage
TranslateAcceleratorA
TrackPopupMenu
SystemParametersInfoA
ShowWindow
SetWindowPos
SetWindowLongA
SetTimer
SetProcessDefaultLayout
SetCapture
SendMessageA
SendDlgItemMessageA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClassA
PostQuitMessage
PostMessageA
OffsetRect
MonitorFromRect
MessageBoxA
LoadStringA
GetGUIThreadInfo
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetCapture
EndPaint
EndDialog
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcA
CreateWindowExA
CreateDialogParamA
BeginPaint
gdi32
SelectObject
GetStockObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
StretchBlt
BitBlt
comctl32
InitCommonControlsEx
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
SHAppBarMessage
Shell_NotifyIconA
msvcrt
_fpreset
__lconv_init
signal
_acmdln
__initenv
_initterm
atoi
_cexit
exit
__set_app_type
__getmainargs
_amsg_exit
__setusermatherr
malloc
strlen
memcpy
memset
kernel32
GetUserDefaultUILanguage
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryW
GetProcAddress
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
TlsGetValue
GetTickCount
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ