Static task
static1
Behavioral task
behavioral1
Sample
39035d9943126c511056a77e0826fa91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39035d9943126c511056a77e0826fa91.exe
Resource
win10v2004-20231215-en
General
-
Target
39035d9943126c511056a77e0826fa91
-
Size
64KB
-
MD5
39035d9943126c511056a77e0826fa91
-
SHA1
50dc14234e16a30cdf7ffa566656bab7d5cd5a29
-
SHA256
f24534b55b332058f14686744de4dd5237c5338997985b5f7fcb57ab9cf90c26
-
SHA512
48b44f984b08d99f70b611c944f282ac09909489972717b7ae44604d9629714395aa2f48c225a18dfeed849ceb6779fd2ff5e71c986fc1f662b6d2546317cca8
-
SSDEEP
1536:lEhbNAokdlzrE2dX7hvHUK4u5VuQu0KMxLl31+dv5KTH:qhyXrXhv0AbuQuZMoaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39035d9943126c511056a77e0826fa91
Files
-
39035d9943126c511056a77e0826fa91.exe windows:4 windows x86 arch:x86
47742e3f4ba29ae04238e6e8b69c791d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExA
RegSetValueExA
CryptDestroyHash
CryptAcquireContextW
CryptGetHashParam
CryptReleaseContext
RegCreateKeyExA
RegCloseKey
CryptCreateHash
GetUserNameW
CryptHashData
DuplicateTokenEx
kernel32
ExpandEnvironmentStringsW
HeapReAlloc
SetEvent
VirtualAlloc
GetFileAttributesA
WaitForSingleObject
GetSystemTimeAsFileTime
VirtualProtect
Sleep
GetVersionExW
FindClose
GetProcAddress
GetTickCount
FindNextFileW
GlobalUnlock
GetLastError
ReleaseMutex
shlwapi
StrCmpNIA
StrStrW
PathFileExistsW
wnsprintfA
wvnsprintfA
SHDeleteKeyA
PathMatchSpecW
PathRemoveFileSpecW
wvnsprintfW
StrCmpNIW
PathFindFileNameW
wnsprintfW
user32
GetDlgItemTextA
GetMessageA
GetWindowTextA
GetKeyboardState
GetDlgItem
SendMessageA
DispatchMessageA
DrawIcon
GetForegroundWindow
FindWindowExA
MsgWaitForMultipleObjects
CloseWindowStation
SetProcessWindowStation
GetClipboardData
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE