Static task
static1
Behavioral task
behavioral1
Sample
236b602bcf417a6a3d8cee3c63e8d2c8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
236b602bcf417a6a3d8cee3c63e8d2c8.exe
Resource
win10v2004-20231215-en
General
-
Target
236b602bcf417a6a3d8cee3c63e8d2c8
-
Size
592KB
-
MD5
236b602bcf417a6a3d8cee3c63e8d2c8
-
SHA1
9ff2b8306993f15e58a994dc244d14c852e3cac4
-
SHA256
cb0966df4d72e01b4ce0e733b17e6531411f61e2b8480df8c1c4b9e7a7a73eb3
-
SHA512
74bdc8ccfc7f4932b7bf537e6b4e12e0004446d8db409b804fed247b4644715fec94720aa8efccf25ba3188a9a1f46b64460bcf64eeadf592b580f150e867639
-
SSDEEP
12288:bBjz3XP01x3MaXTAs+p6WFKVa7eczHORZ6SU5W:bBv/0TMaX8s+WVUi/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236b602bcf417a6a3d8cee3c63e8d2c8
Files
-
236b602bcf417a6a3d8cee3c63e8d2c8.exe windows:4 windows x86 arch:x86
01b4c7b2efad6f7185a18b04d0fe5ea5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
WriteFile
GetStartupInfoA
OpenMutexA
GetStringTypeA
DeleteCriticalSection
LCMapStringA
SetHandleCount
GetCurrentThreadId
GetEnvironmentStrings
TlsSetValue
InterlockedExchange
GetFileType
CloseHandle
TlsFree
IsBadWritePtr
QueryPerformanceCounter
GetStdHandle
LeaveCriticalSection
HeapDestroy
VirtualFree
HeapReAlloc
GetCPInfo
GetProcessShutdownParameters
GetSystemTime
VirtualAlloc
EnterCriticalSection
FreeEnvironmentStringsW
TerminateProcess
SetLastError
CompareStringA
CreateMutexA
GetCurrentThread
LoadLibraryA
OpenWaitableTimerW
CompareStringW
HeapCreate
SetEnvironmentVariableA
InterlockedDecrement
UnhandledExceptionFilter
FlushFileBuffers
TlsGetValue
VirtualQuery
SetStdHandle
InitializeCriticalSection
GetModuleFileNameA
GetModuleHandleA
WriteConsoleW
WideCharToMultiByte
GetOEMCP
GetCurrentProcessId
GetStringTypeW
FreeEnvironmentStringsA
InterlockedIncrement
HeapFree
RtlUnwind
SetFilePointer
HeapAlloc
GetLastError
GetACP
ExitProcess
GetEnvironmentStringsW
GetCurrentProcess
GetTimeZoneInformation
GetCommandLineA
LCMapStringW
MultiByteToWideChar
GetProcAddress
GetLocalTime
TlsAlloc
ReadFile
GetSystemTimeAsFileTime
GetVersion
GetTickCount
user32
SwapMouseButton
ExcludeUpdateRgn
DdePostAdvise
CreateWindowExA
OpenIcon
GetKBCodePage
GetMenuItemInfoA
CreateIconIndirect
GetParent
GetKeyboardState
DestroyWindow
ModifyMenuW
MessageBoxA
WindowFromPoint
SetMenuDefaultItem
EnableMenuItem
SetKeyboardState
WaitMessage
DdeReconnect
GetWindowWord
ChangeDisplaySettingsExW
GetSystemMenu
GetClassInfoExA
GetGUIThreadInfo
GetSysColor
DialogBoxIndirectParamA
DdeDisconnect
GetMessageExtraInfo
DlgDirSelectComboBoxExA
ShowCaret
ScreenToClient
RegisterDeviceNotificationW
ShowWindow
CreateDialogIndirectParamA
CheckMenuRadioItem
GetFocus
IsMenu
EnumWindows
LoadMenuW
DestroyAcceleratorTable
SetClassLongW
RegisterClassExW
RegisterClassExA
DefWindowProcA
EnumPropsExA
OpenWindowStationW
GetWindowTextA
CallWindowProcW
PostThreadMessageW
ToUnicodeEx
ScrollWindow
SetMenuItemBitmaps
EnumWindowStationsA
MessageBoxIndirectW
SendNotifyMessageA
SetWindowTextA
SetSystemCursor
GetDoubleClickTime
GetMenuContextHelpId
CharPrevExA
CascadeChildWindows
RegisterClassA
EnumPropsExW
GetActiveWindow
LoadCursorA
CloseClipboard
comctl32
CreateStatusWindow
CreateToolbar
ImageList_DragEnter
ImageList_Write
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_GetIconSize
CreatePropertySheetPage
ImageList_LoadImageW
ImageList_Draw
ImageList_BeginDrag
ImageList_Merge
ImageList_Remove
InitCommonControlsEx
CreateToolbarEx
ImageList_AddMasked
ImageList_DragLeave
CreateUpDownControl
CreateMappedBitmap
ImageList_DrawIndirect
ImageList_SetDragCursorImage
ImageList_SetFilter
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ