Static task
static1
Behavioral task
behavioral1
Sample
9b723407511efef92feb23a80a8ed880_exe32.exe
Resource
win7-20230831-en
General
-
Target
9b723407511efef92feb23a80a8ed880_exe32.exe
-
Size
84KB
-
MD5
9b723407511efef92feb23a80a8ed880
-
SHA1
091dcb6e55eb3747a2f49a45ef6e6960a4e6e069
-
SHA256
950652a1688f62bc7161aadbc8dc5d7a0e5de38826e63690cf3552aea1e679df
-
SHA512
d94744f090fbbf9149eff37ac61ef0b550b9534e8e5b14f420677413fe73cdb4293bfd316467ed9105681cf4c5a3038a006a91d8aaf55628e6d1b9c2cb3fb9e6
-
SSDEEP
1536:zD70ttk2eO8dedGYs1nVBbg14erRcg1Fbpr3I2//gDk0FzK:zPmNeOuedzsBC4mRFbV3Riksz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b723407511efef92feb23a80a8ed880_exe32.exe
Files
-
9b723407511efef92feb23a80a8ed880_exe32.exe.exe windows:5 windows x86
382b28da629742651c4522adfadd6438
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetCurrentThread
GetPriorityClass
GetSystemWindowsDirectoryA
FileTimeToSystemTime
GetSystemDirectoryA
GetACP
GetLastError
SetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
GetCurrentProcess
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
RtlUnwind
lstrcmpA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
IsProcessorFeaturePresent
user32
EndPaint
GetMessageA
GetWindowRect
IsCharAlphaA
SubtractRect
GetClientRect
GetWindowTextLengthA
SetRectEmpty
BeginPaint
PtInRect
TranslateMessage
InflateRect
GetWindowPlacement
OffsetRect
GetWindowTextA
SetRect
MessageBoxA
UnionRect
GetInputState
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetCursor
RegisterClassA
IsRectEmpty
gdi32
Arc
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ