Static task
static1
Behavioral task
behavioral1
Sample
f793d8bcafda8ba058f3f636e5d6e65f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f793d8bcafda8ba058f3f636e5d6e65f.exe
Resource
win10v2004-20231222-en
General
-
Target
f793d8bcafda8ba058f3f636e5d6e65f
-
Size
218KB
-
MD5
f793d8bcafda8ba058f3f636e5d6e65f
-
SHA1
3bb333ca3ee3882129a58d916ba77330b8021dbb
-
SHA256
86365371eb6c004755ffa1ab05c80d56fc77716977de826ac965da286fd0902a
-
SHA512
789deeafc8b3f567b4273b531274cb0df908c0e42e1b7f9eb79e224d7dbea1a25bb5adcff842cba6308da0e5c1fa9f2357a12e6eef5d30588648bf4626a52012
-
SSDEEP
6144:MVNaJWnn/L12Fr+iHjH6loFSEHYOHdyzi:7Jqn/LAt+qVHY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f793d8bcafda8ba058f3f636e5d6e65f
Files
-
f793d8bcafda8ba058f3f636e5d6e65f.exe windows:4 windows x86 arch:x86
9484e7de545ba0d316d4568c32041908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegEnumKeyExA
RegEnumKeyA
kernel32
LoadLibraryA
ExitProcess
lstrlenA
GetACP
GetProcAddress
LoadLibraryExA
VirtualAllocEx
ExitThread
GetLastError
IsBadHugeReadPtr
GlobalAlloc
GetModuleHandleA
user32
SetRect
DrawTextA
SetWindowTextA
RegisterWindowMessageA
GetClipboardData
BeginPaint
IsWindow
SetMenu
ShowWindow
GetKeyboardState
IsChild
GetDCEx
MapWindowPoints
GetSystemMenu
GetKeyboardLayoutNameA
LoadCursorA
GetFocus
ScrollWindow
GetSysColor
GetMenuState
GetClientRect
IsDialogMessageW
ClientToScreen
GetSysColorBrush
GetScrollRange
GetWindowLongA
GetKeyNameTextA
MapVirtualKeyA
EnableMenuItem
InvalidateRect
InflateRect
GetCursorPos
InsertMenuItemA
SetWindowsHookExA
EnumThreadWindows
CharNextA
GetDesktopWindow
InsertMenuA
CallNextHookEx
CharLowerBuffA
GetKeyState
DispatchMessageW
MessageBeep
DeleteMenu
DestroyWindow
CreatePopupMenu
GetDC
GetWindowRect
GetClassNameA
MoveWindow
IsWindowVisible
EnumWindows
ScreenToClient
CloseClipboard
GetPropA
DefFrameProcA
GetKeyboardLayout
SetForegroundWindow
TrackPopupMenu
CallWindowProcA
SetClipboardData
MessageBoxA
DrawMenuBar
FindWindowA
LoadStringA
IsIconic
GetWindowThreadProcessId
CharToOemA
GetMenuItemID
GetCapture
PeekMessageA
PeekMessageW
GetMenuItemCount
LoadBitmapA
PostQuitMessage
RemovePropA
GetForegroundWindow
IsZoomed
GetActiveWindow
DestroyCursor
AdjustWindowRectEx
GetParent
ole32
CoGetMalloc
CoUnmarshalInterface
CreateStreamOnHGlobal
CoRevokeClassObject
CreateBindCtx
ReleaseStgMedium
PropVariantClear
WriteClassStm
CLSIDFromProgID
Sections
CODE Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1024B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ