Static task
static1
Behavioral task
behavioral1
Sample
493b5f9b7df2ab151d76e1b30f66ea93.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
493b5f9b7df2ab151d76e1b30f66ea93.exe
Resource
win10v2004-20231215-en
General
-
Target
493b5f9b7df2ab151d76e1b30f66ea93
-
Size
612KB
-
MD5
493b5f9b7df2ab151d76e1b30f66ea93
-
SHA1
0667ff90d3f14ebea0d919a7bf0c370d71fa1ef1
-
SHA256
7c5eb8e597e3bd93303e870c549699859ee339700f761ec534b143ad2bc2c6b0
-
SHA512
b8fa11ad80f6c5715a4790d30b74ee72cd68cfc9d5002668c15efbd2f1453792f2ff776f5fbe5744b0941c7a30899e0bcd2dcab446a96fd997412d778aa3f766
-
SSDEEP
12288:+HZiBJl5loh2zA8uZfPWMdkb4XglSuHYZV014lV8dMnf:nLl/oYzaf8SgQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 493b5f9b7df2ab151d76e1b30f66ea93
Files
-
493b5f9b7df2ab151d76e1b30f66ea93.exe windows:4 windows x86 arch:x86
f33d542ed7329fd1f5d5a9c0f2ecd9cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
DebugBreak
GetOEMCP
TerminateProcess
CreateMutexA
HeapDestroy
CompareStringA
OutputDebugStringA
GetEnvironmentStrings
GetCommandLineA
LeaveCriticalSection
CreateFileW
FreeEnvironmentStringsW
GetTimeZoneInformation
FindNextFileW
GetLastError
GetSystemTimeAsFileTime
OpenMutexA
QueryPerformanceCounter
FindNextFileA
ExitProcess
GetProcAddress
CompareStringW
GetTickCount
HeapCreate
IsBadReadPtr
FreeEnvironmentStringsA
TlsGetValue
GetStringTypeExA
HeapAlloc
MultiByteToWideChar
GetModuleHandleA
ReadConsoleA
TlsFree
UnhandledExceptionFilter
HeapValidate
IsBadWritePtr
EnterCriticalSection
EnumResourceNamesA
TlsAlloc
SetStdHandle
GetStdHandle
InterlockedExchangeAdd
GetModuleFileNameA
GetCurrentThreadId
SetHandleCount
GetCurrentProcess
InitializeCriticalSection
GetStringTypeA
GetCurrentProcessId
GetFileSize
GetFileType
CopyFileA
GetEnvironmentStringsW
GetLocalTime
DeleteCriticalSection
TlsSetValue
SetConsoleCtrlHandler
GetVersion
GetACP
InterlockedIncrement
HeapReAlloc
GetWindowsDirectoryA
GetCurrentThread
WriteFile
VirtualQuery
ReadFileEx
SetLastError
LoadLibraryA
VirtualFree
ReadFile
RtlUnwind
GetCPInfo
GetStartupInfoA
GetLongPathNameW
WideCharToMultiByte
GetStringTypeExW
GlobalCompact
InterlockedExchange
VirtualAlloc
GetNamedPipeInfo
SetFilePointer
GetStringTypeW
WaitNamedPipeA
CloseHandle
InterlockedDecrement
LCMapStringW
FlushFileBuffers
SetThreadContext
GetSystemTime
LCMapStringA
HeapFree
comctl32
ImageList_GetImageCount
DrawStatusText
InitCommonControlsEx
ImageList_DragMove
ImageList_SetIconSize
CreateToolbarEx
DestroyPropertySheetPage
ImageList_DrawIndirect
wininet
InternetTimeToSystemTimeA
user32
SetWinEventHook
DdeUnaccessData
LoadMenuIndirectW
RegisterClassExA
LoadImageA
TabbedTextOutA
wsprintfW
ValidateRect
GetDoubleClickTime
BeginDeferWindowPos
DrawEdge
GetMenuInfo
GetWindowRgn
GetTabbedTextExtentW
DdeAbandonTransaction
DestroyAcceleratorTable
ExitWindowsEx
SendMessageW
RegisterClassA
SetWindowTextA
EndMenu
DlgDirSelectComboBoxExA
LoadStringA
DdeKeepStringHandle
TrackPopupMenuEx
MessageBoxA
UnregisterClassA
CreateWindowExA
SetCursorPos
MessageBoxIndirectW
CreateCaret
SetWindowsHookA
PostQuitMessage
SetDoubleClickTime
shell32
ExtractAssociatedIconW
SHBrowseForFolderW
SHGetFileInfo
comdlg32
GetSaveFileNameA
ReplaceTextW
PrintDlgW
FindTextA
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ