Static task
static1
Behavioral task
behavioral1
Sample
397caec6b545548934214100bfb1b581.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
397caec6b545548934214100bfb1b581.exe
Resource
win10v2004-20231215-en
General
-
Target
397caec6b545548934214100bfb1b581
-
Size
197KB
-
MD5
397caec6b545548934214100bfb1b581
-
SHA1
9da684bbcea419411b70be8170d59d62e2ec79f4
-
SHA256
3d0ac9721b4339bcfd814d825d2aebb7a1c7ae5312c5575807c06f5baa0e3f26
-
SHA512
0a43f2db1921b5ef407e9783d98648c8e4aaa7ac006deb057519cdc2e4f1a4b58aeca48032e902ac96c1a3dc4671613efb7b3cf28381876d5a66f15063199aa1
-
SSDEEP
3072:sa9XKHIFleuW+5HbFDNo++7yxuk0pN9AbblnbfWlp0CnOruz:moFY3+Jr1T039AbbZ+IEOru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 397caec6b545548934214100bfb1b581
Files
-
397caec6b545548934214100bfb1b581.exe windows:4 windows x86 arch:x86
9bd0e637c63d9849c31bc73354b175d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
GetSaveFileNameA
comctl32
ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_Draw
advapi32
RegEnumKeyExA
RegEnumKeyA
GetUserNameA
RegLoadKeyA
version
VerInstallFileA
VerQueryValueA
VerFindFileA
user32
GetClientRect
GetParent
GetDesktopWindow
MapVirtualKeyA
BeginPaint
DestroyMenu
EndPaint
MessageBeep
InsertMenuItemA
CallWindowProcA
GetSubMenu
KillTimer
DrawAnimatedRects
IsChild
LoadBitmapA
EnumChildWindows
DeleteMenu
WindowFromPoint
GetLastActivePopup
IsWindowVisible
ShowScrollBar
CreatePopupMenu
CharNextW
PostMessageA
RemovePropA
GetFocus
SetWindowPlacement
SetScrollInfo
SetScrollPos
EnumThreadWindows
ScrollWindow
SetClipboardData
GetMenuState
SetMenu
wsprintfA
OemToCharA
SetCapture
PostQuitMessage
DrawFrameControl
GetWindowTextA
FillRect
DrawMenuBar
GetKeyboardLayoutList
SendMessageW
GetMenuItemInfoA
GetForegroundWindow
CloseClipboard
GetClipboardData
SetWindowTextA
EnableWindow
RegisterWindowMessageA
GetKeyboardState
SetForegroundWindow
InvalidateRect
EqualRect
ReleaseCapture
GetKeyboardLayoutNameA
InsertMenuA
DrawIconEx
GetClassInfoA
SetRect
UpdateWindow
GetWindowLongA
ShowWindow
GetDlgItem
GetWindowPlacement
GetMenuStringA
CreateWindowExA
GetMenu
SetParent
MapWindowPoints
ole32
GetHGlobalFromStream
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder
gdi32
CopyEnhMetaFileA
GetObjectA
GetDIBits
SaveDC
GetDIBColorTable
kernel32
GetLastError
GetVersionExA
LoadLibraryA
IsBadReadPtr
VirtualAllocEx
GetCommandLineA
lstrlenA
GetACP
GlobalAlloc
GetProcAddress
ExitThread
GetModuleHandleA
ExitProcess
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC0 Size: 512B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 1024B - Virtual size: 815B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ