Static task
static1
Behavioral task
behavioral1
Sample
90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6.exe
Resource
win10v2004-20231023-en
General
-
Target
90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6
-
Size
132KB
-
MD5
958420f8dcbabc4a3eb8372708d677d4
-
SHA1
573f0ac946fac8dc549e2e368e9be9f7692dd7f0
-
SHA256
90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6
-
SHA512
9a19a0f1a7d1720db1b9d9ae07060d6e8d64ddc73ca2af805c8a2a4253bfc734edc7b5dfb3d5f77e14ffa81eff0e415d311b7c0adac10818aa471166bcdbe055
-
SSDEEP
1536:Kwht598dQuzDOSNvjukgcWLJQBLebcndK6j2hdDD8DLKqmlWDZ9kU:/uzNvjukSsGcdK64D8DOsDZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6
Files
-
90808698384a41ae22dc2d7f7786c2f078552648bca331bf0b65c986d5da63a6.exe windows:4 windows x86 arch:x86
17dd8e710722bb6f06835264bad6cfa8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CloseHandle
VirtualQuery
GetSystemInfo
VirtualProtect
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
SetStdHandle
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
HeapFree
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
vinstallengine
??1AppContext@@UAE@XZ
??3AppContext@@SAXPAX@Z
?MemAlloc@@YAPAXK@Z
??2AppContext@@SAPAXI@Z
??0AppContext@@QAE@PAUHINSTANCE__@@H@Z
??2Node@@SAPAXI@Z
??0AppModel@@QAE@PAD@Z
?Initialize@AppContext@@UAEXXZ
?WorkingPath@AppContext@@UAEPADPAVNamedObject@@@Z
?SystemPath@AppContext@@UAEPADXZ
?AppName@AppContext@@UAEPADXZ
?GetObjFileIndexContent@AppContext@@UAEXPAVNamedObject@@AAPAD11@Z
?ClearErrorLog@AppContext@@UAEXXZ
?CreateObject@AppContext@@UAEPAVNamedObject@@PAVObjType@@PADPAV2@@Z
?ClearTimerEventQueue@AppContext@@UAEXXZ
?AddTimerEvent@AppContext@@UAEXGPAVNamedObject@@IPAXK@Z
?DeleteTimerEvent@AppContext@@UAEXPAVNamedObject@@I@Z
?DispatchTimerEvent@AppContext@@UAEXXZ
?ActivateTimer@AppContext@@UAEXXZ
?GetEnvironment@AppContext@@UAEPAVAppSetting@@PAVNamedObject@@@Z
?GetScaledFont@AppContext@@UAEPAVFontNode@@PAV2@@Z
?UpdateApplication@AppContext@@UAEXXZ
?GetFont@AppContext@@UAEPAVFontNode@@PADE@Z
?GetFont@AppContext@@UAEPAVFontNode@@PAVNamedObject@@PADKHHGNPAVLanguageSpec@@E@Z
?GetFocus@AppContext@@UAEPAUHWND__@@XZ
?SetFocus@AppContext@@UAEPAUHWND__@@PAU2@@Z
?ResizeFullScreen@AppContext@@UAEXXZ
?RestoreSize@AppContext@@UAEXXZ
?IsFullScreen@AppContext@@UAEEXZ
?OriginalSize@AppContext@@UAEEAAH0@Z
?GetTextMatrix@AppContext@@UAEXPAVFontNode@@@Z
?TextInfo@AppContext@@UAE?AUWH@@PADHPAVFontNode@@@Z
?StartDownLoadThread@AppContext@@UAEPAVThreadPreloadPackage@@PAD0H@Z
?LoadAppCursors@AppContext@@UAEXXZ
?GetIcon@AppContext@@UAEPAVNamedObject@@PAV2@PAD@Z
?SetDefaultWinStyle@AppContext@@UAEXE@Z
?ReportError@AppContext@@UAEXPADPAVNamedObject@@@Z
?ReportException@AppContext@@UAEXPAVNamedObject@@@Z
?DynamicReportError@AppContext@@UAEXPADPAVNamedObject@@@Z
?EnableMenu@AppContext@@UAEXPAD0E@Z
?CheckMenu@AppContext@@UAEXPAD0E@Z
?RequestUpdate@AppContext@@UAEXPAVNamedDrawingObject@@PAUHRGN__@@@Z
?GetGeoScalarUnit@AppContext@@UAEGXZ
?GetDefaultOpenDirectory@AppContext@@UAEPADPAD0@Z
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE