Static task
static1
Behavioral task
behavioral1
Sample
89d65aa628606677d55ddabd1a6a9635.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
89d65aa628606677d55ddabd1a6a9635.exe
Resource
win10v2004-20231222-en
General
-
Target
89d65aa628606677d55ddabd1a6a9635
-
Size
28KB
-
MD5
89d65aa628606677d55ddabd1a6a9635
-
SHA1
28f88a49608a4798d5b0412c24329efa259e3182
-
SHA256
e47c7bfab0e8a3469990addc1a865dc27d4eeb3ce70cbfce840e4b39617a33fb
-
SHA512
30ac47e46f63b684a07346a550610133e5d9c911db22264d86ee31f514b4a6cd8fb52467fd9fa1fb6af0d4863e557f3f53a2dbc3c3001a72016bd3718cf61980
-
SSDEEP
768:sKu43BRxFjIoW9wcvIruSCLsiA8X1WoN3orGk:Vu4RPpe2cvIruSWsiAS1jYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d65aa628606677d55ddabd1a6a9635
Files
-
89d65aa628606677d55ddabd1a6a9635.exe windows:4 windows x86 arch:x86
395fa8a42c0cc12318dbe1f541578aed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetCurrentPositionEx
AbortPath
GetBrushOrgEx
ExtTextOutA
CloseFigure
AddFontResourceW
AddFontResourceExA
GetPixel
DeleteObject
AddFontResourceTracking
BeginPath
CreateSolidBrush
GetClipBox
GetBitmapBits
AddFontResourceExW
ClearBrushAttributes
GetPixel
GetPixel
CopyMetaFileA
ClearBitmapAttributes
BeginPath
AddFontResourceExW
DeleteDC
AbortPath
AddFontResourceW
ExcludeClipRect
CancelDC
CloseMetaFile
AddFontResourceA
GetDCOrgEx
AddFontResourceExA
AddFontMemResourceEx
GetClipBox
GetBitmapBits
ClearBitmapAttributes
AddFontMemResourceEx
AbortPath
RestoreDC
CreateSolidBrush
AddFontResourceW
ClearBrushAttributes
CopyMetaFileA
ExcludeClipRect
CloseMetaFile
AddFontResourceA
DeleteDC
GetClipBox
AddFontResourceExA
BitBlt
BeginPath
AddFontResourceTracking
GetCurrentPositionEx
CancelDC
AddFontResourceExW
GetPixel
GetBrushOrgEx
GetPixel
DeleteObject
kernel32
FindFirstFileA
DeleteFileW
ExitThread
ReadConsoleA
OpenFileMappingA
CopyFileExW
GetStdHandle
CopyFileExA
CreateDirectoryA
SetLastError
GetFileTime
GetLastError
FindAtomA
CreateThread
DeleteAtom
ReadFile
GetConsoleMode
GetFileSize
GetCPInfo
Sleep
CopyFileA
GlobalFree
CreateProcessA
GetComputerNameA
user32
CopyIcon
DialogBoxParamA
IsMenu
IsWindow
EndDialog
AppendMenuW
DialogBoxParamW
GetDC
GetCursor
CreateIcon
AppendMenuA
DrawTextA
AlignRects
LoadCursorA
DrawTextW
GetWindowTextA
GetMenu
LoadMenuA
GetDlgItem
GetWindowTextLengthA
CalcMenuBar
BlockInput
InsertMenuA
DrawIconEx
LoadCursorA
GetMenu
AlignRects
DrawIcon
GetCursor
IsWindow
CopyIcon
GetFocus
DrawTextA
GetDC
IsMenu
CopyRect
GetWindowTextLengthA
BlockInput
GetWindowTextA
CreateIcon
CalcMenuBar
DrawTextW
GetDlgItem
GetDlgItem
IsWindow
GetFocus
DrawTextW
CreateIcon
DialogBoxParamW
EndDialog
BlockInput
AlignRects
InsertMenuA
CopyIcon
CloseWindow
LoadCursorA
DialogBoxParamA
GetDC
GetCursor
CopyImage
GetWindowTextA
CalcMenuBar
advapi32
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegReplaceKeyA
RegEnumKeyW
RegEnumKeyA
RegDeleteValueA
RegEnumKeyExW
RegQueryValueExW
RegQueryValueW
RegOpenKeyW
RegLoadKeyA
RegCreateKeyW
RegReplaceKeyW
RegEnumValueW
RegDeleteKeyA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ