Static task
static1
Behavioral task
behavioral1
Sample
09d7b92ca799ae83cfd440502aba8df8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09d7b92ca799ae83cfd440502aba8df8.exe
Resource
win10v2004-20231215-en
General
-
Target
09d7b92ca799ae83cfd440502aba8df8
-
Size
604KB
-
MD5
09d7b92ca799ae83cfd440502aba8df8
-
SHA1
6d22b10f9368877a5033ff7ad963f155029f92e1
-
SHA256
034e6c0acf3ab9fc62982db01228966fdab6f938f339154ac0d4f1f3827c5381
-
SHA512
b82e6b1e8c738e427d80740b7542060dbce70704142e1ae073fd82d9ff0c37a1fd70d9ff8398237fb7cccb32cd8a7aa61b80c723995745fd2cccffc3e02c8e0f
-
SSDEEP
12288:FtRW4pO07Kx8wckE378QB58gNR7Q0QmHd0CY4JR8ud9iIgo:PZL88wctB58YR7NQmHdU4J6Ig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d7b92ca799ae83cfd440502aba8df8
Files
-
09d7b92ca799ae83cfd440502aba8df8.exe windows:4 windows x86 arch:x86
4e652e0e34bdc22beeb4bd03c2f897c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Read
ImageList_Destroy
ImageList_SetFilter
ImageList_Merge
ImageList_GetImageInfo
CreateStatusWindowA
ImageList_DragEnter
ImageList_Draw
CreateUpDownControl
GetEffectiveClientRect
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_AddIcon
CreateMappedBitmap
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_Replace
ImageList_GetDragImage
ImageList_Duplicate
DrawStatusTextW
ImageList_GetIconSize
ImageList_Remove
CreateStatusWindow
ImageList_DragShowNolock
ImageList_AddMasked
CreateToolbar
kernel32
GetTimeFormatA
CreateFileA
lstrcpyA
HeapReAlloc
GetStringTypeW
GetStartupInfoA
VirtualFree
CreateMutexA
HeapDestroy
GetLastError
CompareStringW
SetLocaleInfoA
GetConsoleCP
TlsSetValue
DeleteCriticalSection
GetEnvironmentStringsW
InterlockedDecrement
LoadLibraryA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetVersionExA
WriteFile
SetStdHandle
ExitProcess
GetStringTypeA
GetConsoleMode
CompareStringA
GetStartupInfoW
SetConsoleCtrlHandler
HeapAlloc
FreeEnvironmentStringsA
IsValidCodePage
CloseHandle
GetCommandLineW
GetACP
GetEnvironmentStrings
GetOEMCP
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetCPInfo
InterlockedExchange
TlsFree
CopyFileExA
GetModuleHandleA
GetProcessHeap
GetCurrentThreadId
ReadFile
RtlUnwind
GetUserDefaultLCID
InterlockedIncrement
GetModuleFileNameW
IsValidLocale
HeapSize
HeapFree
GetTickCount
TransmitCommChar
LCMapStringW
FlushFileBuffers
GetCurrentThread
GetFileType
SetFilePointer
SetLastError
GetLocaleInfoA
OpenMutexA
TlsGetValue
GetLocaleInfoW
GetTimeZoneInformation
LeaveCriticalSection
GetCalendarInfoW
GetStdHandle
Sleep
HeapCreate
EnumSystemLocalesA
MultiByteToWideChar
WideCharToMultiByte
WriteConsoleW
FreeLibrary
GetLogicalDriveStringsW
GetConsoleOutputCP
VirtualProtect
EnterCriticalSection
LCMapStringA
SetThreadPriority
VirtualQuery
WriteConsoleA
TlsAlloc
IsDebuggerPresent
InitializeCriticalSection
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetCommandLineA
FreeEnvironmentStringsW
SetHandleCount
GetProcAddress
user32
DdeKeepStringHandle
InsertMenuItemW
DdeConnect
SetWindowPos
DestroyWindow
RegisterClassA
IsCharLowerW
SetWindowsHookW
AnyPopup
ToUnicodeEx
CascadeChildWindows
MonitorFromWindow
MapVirtualKeyExW
FindWindowA
BroadcastSystemMessageW
DdeFreeStringHandle
TranslateAcceleratorA
CreateWindowStationA
RegisterDeviceNotificationW
RegisterClassExA
ShowCaret
CallMsgFilterA
DdeGetData
GetDlgItem
TileChildWindows
EnumDesktopsA
DlgDirSelectComboBoxExA
wininet
InternetSetOptionW
InternetQueryOptionW
InternetAlgIdToStringA
HttpEndRequestW
FindFirstUrlCacheEntryA
InternetGoOnlineA
UnlockUrlCacheEntryFileW
FtpDeleteFileW
InternetReadFileExW
advapi32
RegQueryInfoKeyA
StartServiceA
LogonUserW
RegRestoreKeyA
RegReplaceKeyA
CryptAcquireContextA
CryptEnumProvidersW
LookupSecurityDescriptorPartsW
RegReplaceKeyW
CryptSetProviderExW
CryptHashData
RegDeleteKeyA
CryptCreateHash
CryptSetProviderA
CryptSetProviderW
CryptSetHashParam
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ