Static task
static1
Behavioral task
behavioral1
Sample
95a34321e790feaa5eb52be7407a6b78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95a34321e790feaa5eb52be7407a6b78.exe
Resource
win10v2004-20231215-en
General
-
Target
95a34321e790feaa5eb52be7407a6b78
-
Size
245KB
-
MD5
95a34321e790feaa5eb52be7407a6b78
-
SHA1
17ab8f6c2952544475fd3d3907b083fe950e3694
-
SHA256
263f626328b872985dd8839942eed9401dec0db6196052bff5c30286d2dd5d99
-
SHA512
7b469d892d481924302be8c9e66771bfe5db89e4ee168de49a7ee26133c97b432abb1c17d7b4262307a6dfaa3f862562267fa448c92b557982e1db8ddaa0287e
-
SSDEEP
6144:UA4nSSpKnK7b+1Czdh3/0VZ494C78ELJfdjy:D4nBoKvDzz8VvgJF1jy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 95a34321e790feaa5eb52be7407a6b78
Files
-
95a34321e790feaa5eb52be7407a6b78.exe windows:4 windows x86 arch:x86
9d7fd5f0305d56f38ebf19d32f07c6e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
InvalidateRgn
PostMessageW
UpdateWindow
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
PostQuitMessage
SetWindowPos
MapDialogRect
kernel32
GetLogicalDriveStringsA
SetUnhandledExceptionFilter
QueryPerformanceCounter
CreateFileA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
oleaut32
DispGetIDsOfNames
OleLoadPicture
QueryPathOfRegTypeLib
GetErrorInfo
SetErrorInfo
VariantClear
SysReAllocStringLen
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
shlwapi
PathFindExtensionA
Sections
.text Size: 117KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ