Static task
static1
Behavioral task
behavioral1
Sample
09200a23968107f8837bd26121fffd7f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09200a23968107f8837bd26121fffd7f.exe
Resource
win10v2004-20231215-en
General
-
Target
09200a23968107f8837bd26121fffd7f
-
Size
311KB
-
MD5
09200a23968107f8837bd26121fffd7f
-
SHA1
2727d08a018d0dbc079b2525c1f93345ba1b1620
-
SHA256
9fae5dbe7c2ac6dc24ae2f840b6613c9aac9aef00d81b265152d380ebe36dbbe
-
SHA512
fec49cb9041100f247dfff672eb73fd6ed408fcc40e6fd44991aadcdeab41208ca4a104c632799d4e8aa6681a35921b8a46db71a1171f3bf5f5567a4b096eb7f
-
SSDEEP
6144:BaIU6aNE80qYBQ1y9m5BD4MUuNtFtRcadNajhCKUYgbMRcFns:BaIU6aaqYBQswjMSNd7NchCtY+fFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09200a23968107f8837bd26121fffd7f
Files
-
09200a23968107f8837bd26121fffd7f.exe windows:4 windows x86 arch:x86
032aa3db8dbde7be70d6a84f5c5035ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
GetNumberOfConsoleInputEvents
GlobalSize
GetFileType
GetFileSize
MapViewOfFile
ExitProcess
CreateFileA
ReadFile
Sleep
CloseHandle
CreateFileMappingA
WriteFile
lstrlenA
avifil32
AVIStreamRelease
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIFileGetStream
AVIStreamInfoA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileInit
AVIFileRelease
AVISaveOptions
AVIStreamWrite
gdi32
CombineRgn
FillRgn
GetObjectA
SelectObject
CreateRectRgn
DeleteObject
SetDIBitsToDevice
CreateDIBSection
StretchBlt
GetCurrentObject
DeleteDC
user32
RegisterClassA
ShowWindow
ReleaseCapture
GetKeyState
DefWindowProcA
EnumWindowStationsW
SetFocus
GetClassLongW
SetCapture
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ