Static task
static1
Behavioral task
behavioral1
Sample
422614fc8fed2095920971871153c359.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
422614fc8fed2095920971871153c359.exe
Resource
win10v2004-20231215-en
General
-
Target
422614fc8fed2095920971871153c359
-
Size
76KB
-
MD5
422614fc8fed2095920971871153c359
-
SHA1
65cab8b86b0cec0bc9e53a4b6c615aebe63d4e29
-
SHA256
8aeff03d7e34c0ba27e3bdef69bace8f604a311ef15259c14803482249cd49fe
-
SHA512
089118d62f2d01c149147add341dc0c17e82a4e93185b2ed0c25acd9923e555a78ea5c493494b67429ae739acceb71e4a38e30b19ced2d28793b14a2f51f385a
-
SSDEEP
1536:qhgRAfRrhAOumdbWGb38CmvwsOENGqQJJr:qPfNhAOB0a38CmvwsXGqQJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 422614fc8fed2095920971871153c359
Files
-
422614fc8fed2095920971871153c359.exe windows:4 windows x86 arch:x86
de88b2cdb2eb31afadb57c724e18d682
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateIcon
CopyRect
LoadMenuA
DialogBoxParamW
CopyIcon
DrawTextW
AlignRects
BlockInput
LoadCursorA
GetDlgItem
GetWindowTextA
CloseWindow
GetCursor
CalcMenuBar
GetDC
GetMenu
DrawIcon
GetFocus
DialogBoxParamA
DrawTextA
InsertMenuA
AppendMenuW
CopyImage
IsWindow
IsMenu
EndDialog
AppendMenuA
GetWindowTextLengthA
DrawIconEx
CloseWindow
IsWindow
BlockInput
GetMenu
CreateIcon
GetWindowTextLengthA
DrawIcon
CalcMenuBar
CopyImage
InsertMenuA
AlignRects
CopyRect
GetCursor
IsMenu
GetDC
CopyIcon
GetFocus
DrawTextW
AppendMenuA
DialogBoxParamW
GetDlgItem
GetWindowTextA
EndDialog
DialogBoxParamA
LoadCursorA
AppendMenuW
DrawIconEx
LoadMenuA
DrawTextA
advapi32
RegEnumKeyA
RegReplaceKeyW
RegCreateKeyW
RegEnumKeyExW
RegLoadKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCreateKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegGetKeySecurity
RegFlushKey
RegQueryValueExW
RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyA
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExA
RegQueryValueA
RegOpenKeyW
RegLoadKeyW
RegQueryValueW
RegLoadKeyA
RegEnumValueW
RegEnumKeyW
RegEnumKeyA
RegDeleteValueA
RegQueryValueW
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExW
RegOpenKeyExA
RegQueryValueA
RegQueryInfoKeyW
RegReplaceKeyA
RegOpenKeyExW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyExW
RegReplaceKeyW
RegFlushKey
RegCreateKeyExA
RegCreateKeyW
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegLoadKeyW
RegEnumValueA
RegOpenKeyW
kernel32
CloseHandle
GetCommandLineA
CloseHandle
FreeLibrary
CloseHandle
HeapAlloc
CloseHandle
lstrcmpA
CloseHandle
lstrcpynA
CloseHandle
GetStdHandle
CloseHandle
GetStringTypeA
CloseHandle
GetModuleFileNameA
CloseHandle
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddta Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iddta Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ