Static task
static1
Behavioral task
behavioral1
Sample
10e8635e86b91b87a34885a520b66d4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10e8635e86b91b87a34885a520b66d4b.exe
Resource
win10v2004-20231215-en
General
-
Target
10e8635e86b91b87a34885a520b66d4b
-
Size
100KB
-
MD5
10e8635e86b91b87a34885a520b66d4b
-
SHA1
11d5b48d38591eb30ee6f8ae38cb8c18a766dc8b
-
SHA256
863b45178e8083aadf93fe71452843b9e1b8ca40a2df3a18ade9b13b99aa38e2
-
SHA512
2ebc897ce8b9c0b18ab0c361048ac2df1964ee91d8de2ed1a82effc16273a3b1c0bb1f296925af07dd443ade8a4a1f368add9e949737b92b918e6dd5ade4bbbe
-
SSDEEP
1536:Ihp/JsoeYQOXPTvIuYY80UGMH1wvSZeM7+Rot:IneYQOfTQuYY80URYEX+Rot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10e8635e86b91b87a34885a520b66d4b
Files
-
10e8635e86b91b87a34885a520b66d4b.exe windows:4 windows x86 arch:x86
89ad4c1dfa9b17e059d297ba6b251442
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
MoveWindow
GetWindowRect
SendMessageA
wsprintfA
LoadStringA
FindWindowA
GetDesktopWindow
EndDialog
DispatchMessageA
TranslateMessage
IsDialogMessageA
CreateDialogParamA
RegisterClassA
SetForegroundWindow
PostMessageA
GetDlgItem
InvalidateRect
SetWindowTextA
SetDlgItemTextA
CallWindowProcA
GetScrollPos
GetParent
ReleaseDC
GetDC
GetSystemMetrics
DestroyWindow
GetSysColor
DrawFocusRect
PostQuitMessage
GetWindowLongA
SetWindowLongA
LoadIconA
WinHelpA
LoadCursorA
GetMessageA
DefDlgProcA
MessageBoxA
kernel32
OpenFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLastError
GetProcAddress
LCMapStringW
LoadLibraryA
GetStdHandle
GetFileType
LCMapStringA
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
MultiByteToWideChar
SetFileAttributesA
CloseHandle
WriteFile
lstrlenA
SetFilePointer
CreateFileA
GetLocalTime
lstrcatA
HeapFree
GetProcessHeap
lstrcpyA
HeapAlloc
HeapDestroy
HeapCreate
LocalFree
FormatMessageA
FreeEnvironmentStringsA
lstrcmpiA
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
FreeEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
gdi32
SelectObject
ExtTextOutA
GetTextExtentPoint32A
SetBkColor
SetTextColor
SetBkMode
shell32
ord59
advapi32
RegQueryValueExA
RegUnLoadKeyA
RegLoadKeyA
RegEnumValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
setupapi
SetupDiDrawMiniIcon
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE