Static task
static1
Behavioral task
behavioral1
Sample
656e27e4388a67b9bf3af178b50f890c0fd2172c18cc8cb8c0ff6a4b35e4c9f2.exe
Resource
win7-20230831-en
General
-
Target
656e27e4388a67b9bf3af178b50f890c0fd2172c18cc8cb8c0ff6a4b35e4c9f2
-
Size
513KB
-
MD5
eeaa43bb04003f98a29b92430ddd22ab
-
SHA1
a328f37b7d15b95e2ff4f3fb4ad65138654de9fe
-
SHA256
656e27e4388a67b9bf3af178b50f890c0fd2172c18cc8cb8c0ff6a4b35e4c9f2
-
SHA512
d2cb413692db246cada4eabe8164cc3c6c18c91e31931160737862760dfaf56f8bf4b3021d7354df00f107228be08c8ba94cf9406989602995cd0d7a6820f41b
-
SSDEEP
6144:pHO8Uf70Z/YcIMeTFe7JdX3lgVFo3dzwonq3z0qaFtay2aVMuZ:pu774gc55dnlIqCaq34PFtfVMuZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656e27e4388a67b9bf3af178b50f890c0fd2172c18cc8cb8c0ff6a4b35e4c9f2
Files
-
656e27e4388a67b9bf3af178b50f890c0fd2172c18cc8cb8c0ff6a4b35e4c9f2.exe windows:5 windows x86
3534b92eddde43830fb0e3603fde601e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
GetTextCharacterExtra
GetTextCharset
SetTextJustification
SetPixel
GetObjectType
UpdateColors
GetTextAlign
GetNearestColor
GetFontLanguageInfo
SetTextColor
SetSystemPaletteUse
user32
GetCursor
BeginPaint
IsWindowUnicode
GetMenuItemID
SetWindowTextA
GetMenuContextHelpId
GetPropA
LoadIconA
GetScrollPos
ShowWindow
GetQueueStatus
CheckDlgButton
GetForegroundWindow
EndDialog
GetDlgItemInt
EndPaint
GetDlgItem
CallWindowProcA
PostMessageA
GetInputState
GetMenu
GetMenuCheckMarkDimensions
RemovePropA
WindowFromDC
GetWindowLongA
DrawTextA
kernel32
GetFullPathNameA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
OutputDebugStringW
GetProcAddress
LockResource
MoveFileA
LocalFlags
IsDebuggerPresent
GetLastError
GetDriveTypeA
GetVersion
GetCurrentThreadId
GlobalHandle
GetCurrentProcessId
SizeofResource
GetTickCount
FindResourceA
LoadResource
GlobalSize
GetFileTime
GetStdHandle
GetModuleHandleA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
IsProcessorFeaturePresent
GetProcessHeap
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
CloseHandle
SetLastError
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindClose
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
Sections
.text Size: 441KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE