Static task
static1
Behavioral task
behavioral1
Sample
89a6d84acb9170d0171213f4abe0bebb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
89a6d84acb9170d0171213f4abe0bebb.exe
Resource
win10v2004-20231215-en
General
-
Target
89a6d84acb9170d0171213f4abe0bebb
-
Size
126KB
-
MD5
89a6d84acb9170d0171213f4abe0bebb
-
SHA1
0b2a6325b6f9169774db1e3dad36f2f107616ec0
-
SHA256
98ccd472080bb4a4386561ec4e316961c83696ae128a6d729ed526807107e3a9
-
SHA512
042615c186d825a12c321a6fbfbea2eb2c5d1b60914e256b271d87f92dffb51d6d14ca9edc96e8cc18196137baa39300b64f35ae46b897a81f579480e58824ef
-
SSDEEP
3072:FBOHgkOGd/SIuuEbsNX26HvgiwbcQnstRUE0e40t:FBGgQdSIuu+6HufnstRUEo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89a6d84acb9170d0171213f4abe0bebb
Files
-
89a6d84acb9170d0171213f4abe0bebb.exe windows:1 windows x86 arch:x86
6fc63cbe2fe29add5bbcc16e4f1bf007
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
Sleep
SetUnhandledExceptionFilter
VirtualAlloc
MultiByteToWideChar
GetModuleFileNameA
DosDateTimeToFileTime
GetLogicalDrives
GetProcessHeaps
GetTempPathA
QueryPerformanceCounter
user32
wvsprintfA
MessageBoxA
ScreenToClient
GetDC
EnumChildWindows
CharUpperW
ShowCursor
SetDlgItemTextA
RegisterClassExW
GetDlgItem
LoadIconA
CharLowerW
CheckMenuItem
GetMessageW
SetCursor
MessageBeep
GetScrollRange
gdi32
CreateDIBitmap
CreateBrushIndirect
CreateBitmapIndirect
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ