Static task
static1
Behavioral task
behavioral1
Sample
b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4.exe
Resource
win10v2004-20231025-en
General
-
Target
b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4
-
Size
452KB
-
MD5
5b3a26b6905b113660cf05a2ffdaebc4
-
SHA1
ea1b0175765ca08ff199865421c454a6993314ef
-
SHA256
b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4
-
SHA512
64c4583a336f9550c60fb2d6b161f46a306e1127fe1cfb15c122a11d506d582d6e570394c8f3156f20790333072556b19030d9b404603da8e54eed9ba9084fbb
-
SSDEEP
6144:trRUhNbzwXbkZ+/taqaqpblD3wTW7Xe4Ohp6u9urP7omhoYkW0CbZ:trRUhNY6+/Kqpbh3wTWr8hUkQsW0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4
Files
-
b9b243b38c185429a92e0d900ade4cbd61ae8c2c78caa4071c8550dc275654d4.exe windows:4 windows x86 arch:x86
e890bfedad9b3599422d74c45364b914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
LocalSize
MultiByteToWideChar
GetACP
GetStartupInfoA
GetModuleHandleA
CreateThread
DeleteCriticalSection
TerminateThread
CloseHandle
WaitForSingleObject
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntryA
ole32
CoTaskMemAlloc
wmvert
wm_NotifySys
wm_BOr
wm_pbin
wm_GetTickCount
wm_Len
wm_InStrRev
wm_PostMessage
wm_pstr
wm_GetBinData
wm_ReadFile
wm_GetTempFileName
wm_Left
wm_GetCmdLine
wm_MsgBox
wm_RpSubText
wm_InStr
wm_Split
wm_Sleep
wm_Kill
wm_GetRunPath
wm_UpdateWindow
wm_Destroy
wm_ToInt
wm_Run
wm_GotoInternet
wm_CreateWindowFromTemplate
wm_Str
wm_Right
msvcrt
_except_handler3
free
_exit
_XcptFilter
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ