Static task
static1
Behavioral task
behavioral1
Sample
209fc016fbde7362e12bef5737e985e1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
209fc016fbde7362e12bef5737e985e1.exe
Resource
win10v2004-20231215-en
General
-
Target
209fc016fbde7362e12bef5737e985e1
-
Size
775KB
-
MD5
209fc016fbde7362e12bef5737e985e1
-
SHA1
7462493e4df8450f9affedf4f2cc17d98f3bc6da
-
SHA256
7281c1f40e35e9939226d118d29b6ffab49619fcc84865d6173c6ac6d6035642
-
SHA512
a1f9380a07540abb48ef5cdaf017313a22b4534491bb6a086e8858b0db3afda3d0a912079f76abfcae5bbc311a752b2181189013319747e694db67d86c08bcd0
-
SSDEEP
12288:jyZ2QJJPl7uuhYeQdQwVAV7brZGAriCMr0x1x28vJdvSPmShJ6Edg:jW2Kl7BrDxrvr7Mrm1x28imShJbdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 209fc016fbde7362e12bef5737e985e1
Files
-
209fc016fbde7362e12bef5737e985e1.exe windows:5 windows x86 arch:x86
ba8fffd35cd0081d674d9727b28a1499
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
urlmon
CoInternetCreateZoneManager
wininet
InternetGetConnectedState
shell32
ShellExecuteW
comdlg32
GetSaveFileNameW
winspool.drv
OpenPrinterW
crypt32
CertOpenSystemStoreW
wsock32
WSACleanup
shdocvw
DoOrganizeFavDlg
gdiplus
GdipAddPathBezier
winmm
timeGetTime
Sections
.text Size: 628KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE