Static task
static1
Behavioral task
behavioral1
Sample
89ff98d32def8c67d3d75ec847326fa0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
89ff98d32def8c67d3d75ec847326fa0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
89ff98d32def8c67d3d75ec847326fa0_exe32.exe
-
Size
84KB
-
MD5
89ff98d32def8c67d3d75ec847326fa0
-
SHA1
89d09acbc6e03edb2492bd3e04572154b33f9f04
-
SHA256
73e7d54139d3a0afbae06c3703244df521c8b30a2e9aa046dcf89ca40a2f2647
-
SHA512
3b4ea36bebb9d796042700fd77091eaa033f491928840e310943dc450dcb3edca72284e55be1b5e7ec756e1aea869d680fb0235ad39d4dc1b7d1418dcc4d7369
-
SSDEEP
768:i+Hg9ckYfxhFTEDcPzQKXrjuvx0tsVfmZIQkWVfa89WBKXJ/POMrKlHCFknt:1HFk0hFT0esHpFQI1WVP4K5nWliFmt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89ff98d32def8c67d3d75ec847326fa0_exe32.exe
Files
-
89ff98d32def8c67d3d75ec847326fa0_exe32.exe.exe windows:4 windows x86
b97913c311f8f3e21f4c5092d71b5ff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RaiseException
RtlUnwind
HeapSize
HeapReAlloc
TerminateProcess
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
WideCharToMultiByte
InterlockedIncrement
GetVersion
lstrlenA
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
lstrcpynA
GetLastError
SetLastError
Sleep
CreateFileA
WriteFile
CloseHandle
MultiByteToWideChar
CreateProcessA
FindFirstFileA
FindClose
FreeEnvironmentStringsW
GetModuleFileNameA
user32
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
EnableWindow
MessageBoxA
SendMessageA
SetFocus
GetWindowLongA
PeekMessageA
SetWindowsHookExA
LoadStringA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
GetMenu
IsWindowEnabled
CallWindowProcA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
CreateBitmap
SetTextColor
GetClipBox
GetObjectA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
CreateProcessWithLogonW
shell32
SHGetSpecialFolderPathA
comctl32
ord17
shlwapi
SHSetValueA
ws2_32
recv
ioctlsocket
send
connect
WSAGetLastError
inet_addr
htons
socket
WSAStartup
WSACleanup
gethostbyname
netapi32
NetLocalGroupAddMembers
NetUserAdd
NetUserDel
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE