Static task
static1
Behavioral task
behavioral1
Sample
9627fe728a8ff6f3c7b1eeca24296b4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9627fe728a8ff6f3c7b1eeca24296b4c.exe
Resource
win10v2004-20231215-en
General
-
Target
9627fe728a8ff6f3c7b1eeca24296b4c
-
Size
56KB
-
MD5
9627fe728a8ff6f3c7b1eeca24296b4c
-
SHA1
61507a762e15f865b8834157f3ede4466c944da4
-
SHA256
e48ed37ca8c2c3720016126450385687b2153101e7afebe957d98b406518df8c
-
SHA512
2a06336ae20f82c58bf127d249e73eafa3411b545c9bea151899c09085b9fe4e935a91329f1e563081f5915c47662c5c8bb73d4d76c051c707cefb760ba939f9
-
SSDEEP
1536:fEeIs9zgy+mDSq4LSDKZZ5VVBg0OVcIHRD6k0:fE3spglUSq4GDK/vg5cIJP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9627fe728a8ff6f3c7b1eeca24296b4c
Files
-
9627fe728a8ff6f3c7b1eeca24296b4c.exe windows:4 windows x86 arch:x86
79caae73e2bd731d729586af03f9b83d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
CloseHandle
SetConsoleCP
GetModuleHandleA
LoadLibraryExA
GetCommandLineA
GetAtomNameA
GlobalUnlock
HeapCreate
SuspendThread
GetStdHandle
HeapReAlloc
CompareFileTime
GetTickCount
lstrlenA
GetVersion
GetSystemDefaultLangID
VirtualProtect
WaitForMultipleObjects
GetConsoleCP
WaitForSingleObject
user32
CreateMenu
CopyImage
CreateIcon
DialogBoxParamA
GetDlgItem
DestroyMenu
FillRect
SetWindowPos
DispatchMessageA
GetCursorInfo
GetKeyState
DrawCaption
EnableScrollBar
InsertMenuA
GetKeyboardLayout
InvertRect
FindWindowA
SetScrollInfo
DragObject
IsDialogMessage
SetPropA
advapi32
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegEnumValueA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ