Static task
static1
Behavioral task
behavioral1
Sample
f91b3fc90a10a783e059d9a262c7cd13.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f91b3fc90a10a783e059d9a262c7cd13.exe
Resource
win10v2004-20231222-en
General
-
Target
f91b3fc90a10a783e059d9a262c7cd13
-
Size
97KB
-
MD5
f91b3fc90a10a783e059d9a262c7cd13
-
SHA1
595fe95b702374bcbc62d9cc212382f568d375e4
-
SHA256
eb013d129cf5a47974c9c86678a371e94b5f01ce974b1009b1de49fe5510f069
-
SHA512
4e76522f31cd442bd4da7c2daa5b30ace55dfa72d248e4e096e4c1e53ade055fbae36b695c17b090b1ea3a27654804b0e8671a741d551e9d60a66b56f7259706
-
SSDEEP
1536:TV9WNRIWW0P5QFjUu5zB2yvq+qZMSdctALC6k1Fb8uJV0baI:pPs5QLaSHf5PV0ba
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f91b3fc90a10a783e059d9a262c7cd13
Files
-
f91b3fc90a10a783e059d9a262c7cd13.exe windows:5 windows x86 arch:x86
8f3f367f2337b4a50ae1fc67da10300e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
CharNextA
TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
gdi32
GetStockObject
RectVisible
GetDeviceCaps
SaveDC
GetClipBox
SetStretchBltMode
SelectPalette
CreateCompatibleDC
DeleteDC
SetTextColor
GetPixel
CreateFontIndirectA
PatBlt
LineTo
GetObjectA
CreateSolidBrush
GetTextMetricsA
CreatePen
SetTextAlign
SelectObject
SetMapMode
RestoreDC
GetNearestPaletteIndex
CreatePalette
DeleteObject
kernel32
lstrcmpiW
GetACP
GetCommandLineA
GetCurrentProcess
GetVersion
DeleteFileW
GetCurrentThread
SetCurrentDirectoryA
GetDriveTypeA
GetTickCount
GetUserDefaultLangID
lstrlenW
DeleteFileA
GlobalFindAtomW
GetCommandLineW
GlobalFindAtomA
GetConsoleOutputCP
GetProcessHeap
lstrcmpiA
IsDebuggerPresent
GetModuleHandleW
GetOEMCP
MulDiv
CopyFileA
GetThreadLocale
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleA
RemoveDirectoryW
lstrcmpA
GetWindowsDirectoryA
GetCurrentThreadId
lstrlenA
ExitProcess
GetStartupInfoA
RemoveDirectoryA
VirtualAlloc
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ