Static task
static1
Behavioral task
behavioral1
Sample
31e04a7619329a05382394902736a935.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
31e04a7619329a05382394902736a935.exe
Resource
win10v2004-20231215-en
General
-
Target
31e04a7619329a05382394902736a935
-
Size
160KB
-
MD5
31e04a7619329a05382394902736a935
-
SHA1
5c3d5a4d974eee678e30a2815382945c6362a7c0
-
SHA256
c6e8177a0442ca47ab743958c0f8079eedb5aa8fbfbcf9e2cad7af0b9b711587
-
SHA512
eb409b96b07a84aac86fc1c49a491888a719b5abbebf98f626ec96bee81f02914a4d0b54b3a16d6f5e1311fa6638422e8876f3734c0acc6d16d1c0eb594262f3
-
SSDEEP
3072:pu6FZPG2w7yUzK++40O8sS7asS/KhQZdiDD04/Md4J:BCG++4XVQ0cn0yJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e04a7619329a05382394902736a935
Files
-
31e04a7619329a05382394902736a935.exe windows:4 windows x86 arch:x86
3ea823d9bd9d74ad32fb885cb2116395
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
SetConsoleMode
TerminateProcess
GetLastError
VirtualAlloc
LocalAlloc
GetCommandLineA
GetModuleHandleA
TlsAlloc
GetStartupInfoA
user32
CreateWindowExA
DrawTextA
GetClassInfoExW
ReleaseDC
GetDC
GetWindowTextLengthW
GetFocus
SetFocus
EnumChildWindows
SetWindowPos
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetKeyNameTextA
GetWindowTextA
GetWindowTextLengthA
RegisterClassExA
GetClassInfoExA
CheckMenuRadioItem
CheckMenuItem
RegisterHotKey
UnregisterHotKey
ExitWindowsEx
RegisterWindowMessageA
SetDlgItemInt
GetDlgItemInt
ShowScrollBar
GetScrollRange
FindWindowA
SystemParametersInfoW
UpdateWindow
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
malloc
realloc
free
exit
fopen
fseek
fread
fclose
memmove
strncmp
atoi
strchr
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ