Static task
static1
Behavioral task
behavioral1
Sample
95d06e6c1d94316adf8e0a757ba3134c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95d06e6c1d94316adf8e0a757ba3134c.exe
Resource
win10v2004-20231222-en
General
-
Target
95d06e6c1d94316adf8e0a757ba3134c
-
Size
49KB
-
MD5
95d06e6c1d94316adf8e0a757ba3134c
-
SHA1
2ec8cc224772159daf13ecd5b26eb8e60e96c4e7
-
SHA256
6afb3dd0f1db5f3ebb48427ee95e40cc713dd450fdef9375efe33ff81bf5e8e8
-
SHA512
aac8a04ee647df0c130c0dab3935a953bc7fe5fb8564422ec235ef778b9fceda3b85dda99de559814268b5e4dbbffb100f6661118187880373236e6d4ea8c750
-
SSDEEP
1536:ZKjhs1sE2RcW1c7nRpFCkKDRaNpHM7BAIrtfEvn:sjhAmBkKYNps5O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95d06e6c1d94316adf8e0a757ba3134c
Files
-
95d06e6c1d94316adf8e0a757ba3134c.exe windows:5 windows x86 arch:x86
ee36f82dca1acac51b984bf970cdcc3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
GetWindowLongW
GetKeyboardState
SetThreadDesktop
FindWindowExW
GetDlgItemTextA
ToUnicode
LoadCursorW
GetCursorPos
GetWindowThreadProcessId
GetClassNameW
DrawIcon
ExitWindowsEx
EndDialog
GetClipboardData
GetDlgItem
GetForegroundWindow
GetIconInfo
CloseWindowStation
PeekMessageW
GetMessageA
GetWindowTextW
OpenDesktopA
MsgWaitForMultipleObjects
PeekMessageA
OpenWindowStationA
CloseDesktop
GetDlgItemTextW
SendMessageW
GetKeyState
SetProcessWindowStation
DispatchMessageW
CharLowerBuffA
kernel32
GlobalUnlock
GetSystemTime
CloseHandle
GetLogicalDrives
CreateFileMappingW
InitializeCriticalSection
WaitForSingleObject
lstrcpyW
WriteFile
SetEvent
DeleteFileW
GetLastError
GetSystemTimeAsFileTime
IsBadReadPtr
lstrlenW
GetComputerNameW
GetProcessTimes
SystemTimeToFileTime
lstrcatA
MapViewOfFile
LeaveCriticalSection
GetVersionExW
FindNextFileW
lstrlenA
GetProcessHeap
GetThreadPriority
GetDriveTypeW
FindResourceW
SetEndOfFile
lstrcpyA
GetFileTime
ReleaseMutex
GetTickCount
lstrcpynW
GetFileSize
Sleep
SetThreadPriority
ResetEvent
OpenProcess
GetFileSizeEx
GetModuleHandleA
HeapReAlloc
GetModuleFileNameW
GetCurrentThreadId
MoveFileExW
CreateEventW
GetCurrentProcessId
CreateMutexW
GetTimeZoneInformation
SetFileAttributesW
GetCommandLineA
CreateFileW
ReadFile
GlobalLock
MultiByteToWideChar
UnmapViewOfFile
SetLastError
Sections
.pwp Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wjgjov Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jspst Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ