Static task
static1
Behavioral task
behavioral1
Sample
89220fba77c5f452c1eb365e3cfb3ae8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
89220fba77c5f452c1eb365e3cfb3ae8.exe
Resource
win10v2004-20231215-en
General
-
Target
89220fba77c5f452c1eb365e3cfb3ae8
-
Size
84KB
-
MD5
89220fba77c5f452c1eb365e3cfb3ae8
-
SHA1
00a4629926b7b34219de7da9414054847f90efb2
-
SHA256
d8d43df46ecbe3115a26a5faccd3e339821e2179c503b1f234d5d9fc079ededb
-
SHA512
40b808a4490f74975427cfb09093abf7eda7b4eff85e815c883d6befb691c0ba751ec2b412f219b82ed9e4039b49ed193f98e806ed33ef81a45e2de29b6da01d
-
SSDEEP
768:B6R7iC6CqZJmK3gXqxDZyy4+agozM5Qz5L4aPhreJOrSs4cbFBIUyYlb5ighHY7+:MBEnvQXqj34+dozMMR4xrsvxLbBtY79
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89220fba77c5f452c1eb365e3cfb3ae8
Files
-
89220fba77c5f452c1eb365e3cfb3ae8.exe windows:4 windows x86 arch:x86
0a36b2c1f1369195ab4dcfa89f5ba796
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsMenu
DrawTextA
BlockInput
AppendMenuW
IsWindow
CopyIcon
EndDialog
CalcMenuBar
AlignRects
InsertMenuA
CreateIcon
GetWindowTextA
DrawTextW
DrawIcon
GetWindowTextLengthA
AppendMenuA
DialogBoxParamA
comctl32
ImageList_Draw
ImageList_DragMove
ImageList_LoadImageA
ImageList_DrawEx
ImageList_Merge
ImageList_BeginDrag
ImageList_DrawIndirect
ImageList_Copy
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_AddIcon
ImageList_DragLeave
ImageList_Destroy
ImageList_LoadImageW
ImageList_Create
ImageList_GetIcon
ImageList_GetIconSize
ImageList_Replace
kernel32
GetLastError
CreateThread
DeleteAtom
CopyFileA
ReadConsoleA
ReadFile
Sleep
GetComputerNameA
OpenFileMappingA
DeleteFileW
SetLastError
DeleteFileA
CreateDirectoryA
ExitThread
GlobalFree
GetCommandLineA
GetStdHandle
OpenFile
GetConsoleMode
advapi32
RegCreateKeyW
RegDeleteValueA
RegLoadKeyW
RegOpenKeyA
RegOpenKeyW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyW
RegCreateKeyExW
RegLoadKeyA
RegQueryValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyExW
RegDeleteValueW
RegReplaceKeyW
RegEnumKeyA
RegEnumValueA
RegOpenKeyExW
RegQueryInfoKeyA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 805B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ