Static task
static1
Behavioral task
behavioral1
Sample
1933bd329b7aa171e49ef74e8bc4b87c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1933bd329b7aa171e49ef74e8bc4b87c.exe
Resource
win10v2004-20231215-en
General
-
Target
1933bd329b7aa171e49ef74e8bc4b87c
-
Size
347KB
-
MD5
1933bd329b7aa171e49ef74e8bc4b87c
-
SHA1
84bc34e3718c3d8e5199cd9e95d58b3e275c881e
-
SHA256
d9eeb894491dadc12c4aed213f6e7661e8c7a431567bf70b4ea8cf64cc9286ea
-
SHA512
7a2f284f4f5a199f605046ea09455554abc1fdec254426e11c03586287a209ed06eb7ae998b6e9706d89177c16311cd911ba92719026327980c49a21de8b5726
-
SSDEEP
6144:SvcOWWIKfBTM3XD0Yy/FdqzsODY2bhxpBS7vxsyLth4jgN2n+7xY:SvWMtMny/F0NSrrpn4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1933bd329b7aa171e49ef74e8bc4b87c
Files
-
1933bd329b7aa171e49ef74e8bc4b87c.exe windows:4 windows x86 arch:x86
90462c5e549f40ccd0df2ff13b7b9545
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontW
LoadAlterBitmap
user32
DrawMenuBar
DrawCaption
IsCharAlphaA
EndPaint
DrawAnimatedRects
SendIMEMessageExW
InsertMenuItemA
RegisterClassExA
NotifyWinEvent
WindowFromDC
SetWinEventHook
DdeInitializeW
RegisterClassA
DdeFreeStringHandle
shell32
SHGetFileInfo
SheSetCurDrive
SHFreeNameMappings
DragQueryFileW
kernel32
OpenProcess
GetCurrentThreadId
SetConsoleCtrlHandler
ReadFile
CompareStringA
HeapReAlloc
TlsSetValue
VirtualFree
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
WriteFile
GetPriorityClass
GetTickCount
GetConsoleOutputCP
EnumResourceNamesW
LoadLibraryA
GetProcAddress
SetHandleCount
GlobalFlags
MultiByteToWideChar
SetLastError
GetTimeZoneInformation
SetStdHandle
HeapAlloc
WriteConsoleW
ExpandEnvironmentStringsW
InterlockedIncrement
EnumSystemLocalesA
ExitProcess
GetWindowsDirectoryA
WriteConsoleA
FreeLibrary
GetModuleFileNameA
IsDebuggerPresent
GetModuleHandleA
GetConsoleMode
VirtualQuery
Sleep
TlsFree
SetFilePointer
GetLocaleInfoA
HeapCreate
InterlockedDecrement
GetCommandLineA
EnterCriticalSection
RtlUnwind
InterlockedExchange
QueryPerformanceCounter
GetLocaleInfoW
TlsGetValue
OpenMutexA
GetStringTypeW
GetOEMCP
HeapDestroy
TerminateProcess
HeapSize
IsValidLocale
CreateFileA
IsValidCodePage
GetACP
GetModuleHandleW
DosDateTimeToFileTime
LCMapStringW
GetUserDefaultLCID
GetStringTypeA
WideCharToMultiByte
GetStartupInfoA
SetUnhandledExceptionFilter
GetCPInfo
FreeEnvironmentStringsW
SetFileAttributesW
GetCurrentThread
WriteConsoleOutputCharacterW
VirtualAlloc
GetSystemTimeAsFileTime
GetFileType
DeleteCriticalSection
GetEnvironmentStrings
UnhandledExceptionFilter
GetConsoleCP
GetDateFormatA
CreateMutexA
LCMapStringA
GetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetSystemInfo
GetCurrentProcess
CompareStringW
CloseHandle
HeapFree
LeaveCriticalSection
TlsAlloc
GetLastError
GetTimeFormatA
GetCurrentProcessId
FlushFileBuffers
comctl32
InitCommonControlsEx
ImageList_Copy
ImageList_GetBkColor
ImageList_GetFlags
CreateToolbarEx
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_Replace
_TrackMouseEvent
ImageList_Create
ImageList_DragEnter
CreateStatusWindowW
ImageList_DragShowNolock
ImageList_Destroy
MakeDragList
CreateStatusWindow
ImageList_Duplicate
ImageList_GetImageRect
ImageList_Remove
ImageList_Write
ImageList_DrawEx
DrawStatusText
ImageList_SetDragCursorImage
CreateToolbar
ImageList_Merge
GetEffectiveClientRect
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ