Static task
static1
Behavioral task
behavioral1
Sample
86d7a23737c3c80004e20d2feb192892.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86d7a23737c3c80004e20d2feb192892.exe
Resource
win10v2004-20231215-en
General
-
Target
86d7a23737c3c80004e20d2feb192892
-
Size
3.9MB
-
MD5
86d7a23737c3c80004e20d2feb192892
-
SHA1
183f380e0441d0f0acb7b589f85e17fe9bbab888
-
SHA256
05c88954542493b1b3ca880dc7412f18ef6b5f227f1acd6fc213317d733827ae
-
SHA512
8741eed28a920c9f6e1819fd5ca77e2273a0cc5c3daa9ddea9bfbc12eb1d94a4e8c38972473a84ee5d18752a1cdc3e334557892fa89c430ac35cdf0c2f085dba
-
SSDEEP
49152:yD4anXq6U0nUnrFDHdXYE2/fdReUDFOh8+1oytJHM/evjKC/PpZpxkqcIHAPB2U4:yDnhqrFDxYEMnekw1NvXpxkvIHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86d7a23737c3c80004e20d2feb192892
Files
-
86d7a23737c3c80004e20d2feb192892.exe windows:5 windows x86 arch:x86
6bdffc1a76a7a87235eb382bbad17099
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeUninitialize
ShowCaret
GetWindowContextHelpId
GetDCEx
RemoveMenu
advapi32
RegOpenKeyW
RegFlushKey
opengl32
glDrawArrays
glStencilMask
glFlush
glTexSubImage2D
glClearColor
glColorMask
glEnable
glGetFloatv
glGenTextures
glBlendFunc
glDeleteTextures
glIsEnabled
glStencilOp
glDepthFunc
glReadPixels
glDrawElements
glCopyTexSubImage2D
glPixelStorei
glGetIntegerv
glViewport
glStencilFunc
glTexImage2D
glBindTexture
glGetError
glDepthMask
glCopyTexImage2D
glGetString
glClearDepth
kernel32
GetProcessHeap
HeapSize
GetLocaleInfoA
GetStringTypeA
WideCharToMultiByte
LCMapStringA
RtlUnwind
HeapReAlloc
VirtualAlloc
Sleep
InitializeCriticalSection
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
FileTimeToSystemTime
FormatMessageW
FindResourceW
GetLocalTime
GetStringTypeW
CloseHandle
HeapAlloc
GetLastError
GlobalAlloc
lstrlenW
GetFileSize
FindNextFileW
CreateDirectoryW
GlobalUnlock
IsValidCodePage
GetFullPathNameW
GetProcAddress
GetCurrentProcess
GetCurrentThreadId
CreateIoCompletionPort
GetCommTimeouts
lstrcmpiW
OpenFileMappingW
GetModuleHandleExW
GlobalAddAtomW
GetDiskFreeSpaceExW
GetStringTypeExW
EnumSystemLanguageGroupsW
GetConsoleWindow
HeapFree
GetVersionExA
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o693 Size: 941KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ