Static task
static1
Behavioral task
behavioral1
Sample
9c7d70d892b52b84cf927dbcb634c31b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c7d70d892b52b84cf927dbcb634c31b.exe
Resource
win10v2004-20231215-en
General
-
Target
9c7d70d892b52b84cf927dbcb634c31b.exe
-
Size
448KB
-
MD5
9c7d70d892b52b84cf927dbcb634c31b
-
SHA1
8e3da10ab55ea9979e53237a9ccd374fd210ed86
-
SHA256
3a5f1fd2f43385025dd6bb8a1faaadf1d252137e815be81a30b205b0ec50bd7b
-
SHA512
3625ff4ec52de538b573a2b084c8ef6b2c5f3618e194492f2663ebe1ab7f37dc88b92c13d7940decd6bfa630c0893557ae43a8c354dcf6341eb8c98df7b5d7ad
-
SSDEEP
12288:Zk6lFSXvICyBNZ6Ic0GsvRKYL4Zdf+bZ:ZuHyB369ORm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c7d70d892b52b84cf927dbcb634c31b.exe
Files
-
9c7d70d892b52b84cf927dbcb634c31b.exe.exe windows:4 windows x86 arch:x86
821b694e1c5b2a938affca22607519eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
FindResourceExW
CloseHandle
ReleaseMutex
ExitProcess
FindVolumeClose
DeleteFileA
GetTickCount
WriteConsoleA
OpenThread
GetFileAttributesA
CloseHandle
HeapCreate
GetStartupInfoA
GetEnvironmentVariableW
GetCommandLineW
SuspendThread
GetModuleHandleA
SetEvent
HeapDestroy
user32
GetCaretPos
IsZoomed
GetSysColor
GetClassInfoA
FindWindowA
SetFocus
GetIconInfo
GetWindowLongA
DispatchMessageA
GetKeyState
DispatchMessageA
CallWindowProcW
PeekMessageA
htui
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ