Static task
static1
Behavioral task
behavioral1
Sample
Inspect.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Inspect.exe
Resource
win10v2004-20231023-en
General
-
Target
Inspect.exe
-
Size
84KB
-
MD5
ff81060bb7d6ff6495f1fac8c45bd79a
-
SHA1
74bb15e7f3b161fbf2998cb8a13ee55027a1eabd
-
SHA256
6162d481cf5c20a9ebd432a19562ebce7167d3144cbb054c1cc32e00baa7eae4
-
SHA512
63c136ab5274d0e3d0faf1280c0078c7be5a0196a9b6d028a7a38fc4e286e46be320b371a0b2e1836dbe5ab886abab4f0af3858e632d175de08714e8e0e44b3d
-
SSDEEP
1536:ZzsUQOOt7ABqHXRR4UlbTxIYoJT2aVY7+4aN75aw:xsUQOOt77r4GFIYoJgKl73
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Inspect.exe
Files
-
Inspect.exe.exe windows:4 windows x86
e1ae33773fb475ee46abb648d62ff7eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
FormatMessageW
lstrlenW
GetCurrentProcessId
LoadLibraryW
LocalFree
GetModuleFileNameW
LocalAlloc
GetStringTypeA
GetOEMCP
GetACP
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
WriteFile
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
UnhandledExceptionFilter
GetProcAddress
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
HeapSize
HeapAlloc
HeapFree
HeapReAlloc
GetVersion
GetCommandLineA
ExitProcess
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleW
MultiByteToWideChar
user32
DestroyWindow
SetWindowLongW
GetWindowLongW
InvalidateRect
IsWindow
SetRectEmpty
CallWindowProcW
GetParent
CreateWindowExW
SetWindowPos
RegisterClassW
ShowWindow
GetDlgItem
FillRect
GetClientRect
EndDialog
DialogBoxParamW
SetWinEventHook
GetClassNameW
MessageBeep
GetSubMenu
PostQuitMessage
GetMenu
WindowFromPoint
KillTimer
GetCursorPos
LoadImageW
GetWindowThreadProcessId
MapWindowPoints
RegisterHotKey
GetSysColor
UnregisterHotKey
PostMessageW
UnhookWinEvent
SystemParametersInfoW
RegisterClassExW
LoadIconW
LoadCursorW
GetMessageW
GetDialogBaseUnits
SetTimer
CheckMenuItem
TranslateMessage
DispatchMessageW
GetDesktopWindow
SendMessageW
SetWindowRgn
DrawTextW
GetWindowRect
GetDC
SetWindowTextW
GetSystemMetrics
ReleaseDC
DefWindowProcW
wsprintfW
SetDlgItemTextW
gdi32
SelectObject
DeleteObject
CreateCompatibleDC
LineTo
CreateCompatibleBitmap
GetStockObject
CreateSolidBrush
MoveToEx
SetBkColor
CreatePolygonRgn
CreateRectRgnIndirect
DeleteDC
SetTextColor
StretchBlt
Polygon
ole32
CoUninitialize
CoInitialize
oleaut32
VariantClear
SysFreeString
VariantInit
comctl32
CreateToolbarEx
oleacc
WindowFromAccessibleObject
GetStateTextW
AccessibleObjectFromWindow
AccessibleChildren
AccessibleObjectFromPoint
AccessibleObjectFromEvent
GetRoleTextW
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ