Static task
static1
Behavioral task
behavioral1
Sample
97c87c1d7520507c128b0eecc12fdfcf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97c87c1d7520507c128b0eecc12fdfcf.exe
Resource
win10v2004-20231215-en
General
-
Target
97c87c1d7520507c128b0eecc12fdfcf
-
Size
135KB
-
MD5
97c87c1d7520507c128b0eecc12fdfcf
-
SHA1
70b416af637adb6d6263edcb438cdd59c3b55041
-
SHA256
8b88d7e32c3c7d03fab9398e151f26831cfdb1866a3febdb35e134898f02b474
-
SHA512
b4476287dbaed6e7e784d3128e51a3413b8e4845d0223da4db0abefe4275aaa0b7dc2c03382480598bb1a479916d559b2d9b1a63bbfbbdddbeb22d352269dbc0
-
SSDEEP
3072:DTLie4iL2CE9jCVKhwaSr9oI7mkyVMVPfw:W9iL1qqKh+9oI7mkyVMVPf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97c87c1d7520507c128b0eecc12fdfcf
Files
-
97c87c1d7520507c128b0eecc12fdfcf.exe windows:4 windows x86 arch:x86
819c99678bc376079b9ab7fb5fe5b775
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
EnumCalendarInfoA
FindResourceA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetDriveTypeA
GetFileSize
GetTempPathW
GetTimeZoneInformation
HeapSize
IsDBCSLeadByte
LoadLibraryExA
LoadResource
SetEndOfFile
UnhandledExceptionFilter
user32
DrawTextA
EnableMenuItem
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetSubMenu
GetSysColor
GetSystemMetrics
IsWindow
MessageBoxA
PeekMessageA
TranslateMessage
gdi32
BitBlt
CreateDIBSection
SelectPalette
SetMapMode
shell32
ExtractIconW
SHGetPathFromIDList
SHGetPathFromIDListW
comctl32
ImageList_Add
ImageList_DragLeave
ImageList_Draw
ImageList_EndDrag
ImageList_Write
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ