Static task
static1
Behavioral task
behavioral1
Sample
9d4a677ba16f4dfa9c36c49e9ad2c851.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9d4a677ba16f4dfa9c36c49e9ad2c851.exe
Resource
win10v2004-20231215-en
General
-
Target
9d4a677ba16f4dfa9c36c49e9ad2c851.exe
-
Size
87KB
-
MD5
9d4a677ba16f4dfa9c36c49e9ad2c851
-
SHA1
a3dbcfb8e6103967a2f7988f82a62e75ef4fe332
-
SHA256
7df23ef9e2686ff27120ff179ae3a01f9fdbbcd68f193ba9c5f093f4c64bb1a7
-
SHA512
3ec9766795994fa881541f0eccb871ffce316b3086a4c287364bd5ddc7a9ac6ee0651d24dbbeb2ffcd436c2e5a19216dc95cf693ae0fe8c05e39e35aa21de486
-
SSDEEP
1536:ZXT8zljTvNj/Mj4BgaMjGtt3r3QuRiPG5Qh9kcZMMCJunv3B2:tQZ1I4ajGLr3Q7OCh6cZM3Uv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d4a677ba16f4dfa9c36c49e9ad2c851.exe
Files
-
9d4a677ba16f4dfa9c36c49e9ad2c851.exe.exe windows:1 windows x86 arch:x86
1daf7924742be9f3cdf524bf381547ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
EnumSystemLocalesA
GetCommandLineA
GetExitCodeProcess
GetFileSize
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcmpA
lstrcpyA
lstrlenA
gdi32
CopyMetaFileA
EndDoc
FillPath
SetBkColor
SetTextColor
user32
ClipCursor
EndDialog
EqualRect
FindWindowExA
GetMessagePos
GetTopWindow
InvalidateRect
IsWindow
LoadCursorA
MonitorFromRect
PeekMessageA
SetCaretPos
ShowCursor
SwitchDesktop
TrackMouseEvent
TrackPopupMenuEx
UpdateWindow
advapi32
PrivilegedServiceAuditAlarmA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegGetKeySecurity
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RevertToSelf
SetSecurityDescriptorControl
SetTokenInformation
Sections
.code Size: 512B - Virtual size: 371B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 247B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 1024B - Virtual size: 618B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE