Static task
static1
Behavioral task
behavioral1
Sample
388d1ec9c168cfe0afcfd64278a21960_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
388d1ec9c168cfe0afcfd64278a21960_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
388d1ec9c168cfe0afcfd64278a21960_exe32.exe
-
Size
163KB
-
MD5
388d1ec9c168cfe0afcfd64278a21960
-
SHA1
0f827622cff651d70ac600fae59869b82030a610
-
SHA256
0e7f61bbd2e056e3ac3b85dd7cdb8eb9a27dc973abd70af625d4fa39e2e9c98f
-
SHA512
3749b24a8346fa4efcc5cd6f854acf056c6e66bcdf00cc8093b9132b8d307a25230abc1e182ef648668e861eba493d7026de6f927045d269eb38ad6f2ae339c8
-
SSDEEP
3072:JjnaOOgztVt+Mw3WibWH8RLZDEn5/n6l2ccz/dJEfm:Rna0Zw3WyWH8RLZDE5vhcc7d8m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388d1ec9c168cfe0afcfd64278a21960_exe32.exe
Files
-
388d1ec9c168cfe0afcfd64278a21960_exe32.exe.exe windows:1 windows x86
2f8d878a47a535c404fa597730bcdfcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertCloseStore
CryptBinaryToStringW
CertFreeCertificateContext
user32
DefWindowProcW
EnableMenuItem
GetClientRect
GetCursorPos
GetDesktopWindow
GetMenu
GetSystemMetrics
GetWindow
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetTimer
SetWindowTextW
SystemParametersInfoW
UpdateWindow
kernel32
CloseHandle
DeleteFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
GetVersionExW
LoadLibraryA
LoadLibraryW
VirtualProtect
lstrlenW
GetStartupInfoW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
gdi32
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
SetRectRgn
CreateRectRgn
Sections
AUTO Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ