Static task
static1
Behavioral task
behavioral1
Sample
9679b8b0e77b96f688e40a84caa3e7fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9679b8b0e77b96f688e40a84caa3e7fe.exe
Resource
win10v2004-20231215-en
General
-
Target
9679b8b0e77b96f688e40a84caa3e7fe
-
Size
94KB
-
MD5
9679b8b0e77b96f688e40a84caa3e7fe
-
SHA1
e1143c353a1aabc8564cd73e265cd845a26375bf
-
SHA256
cb6a9fb938f7ce5429ccddea94548850c02678f0ded7cdeb2e9730059f742b50
-
SHA512
586397732d933c567d947127f5894318c945e73e2803083aef5e8f9dd4e7bcb0d6a0664e41b0c3a564c9d8e21189a6fb9e99dd29cc84d866b4ad0f08e6a6e4c6
-
SSDEEP
1536:KH/BlFTXLBtB55FPujck2fLbTq3j5FPai6q7kxYwJsYiaCQCMonxM:KBbLBtBRP6+XTnLq7kPJswCVM2xM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9679b8b0e77b96f688e40a84caa3e7fe
Files
-
9679b8b0e77b96f688e40a84caa3e7fe.exe windows:4 windows x86 arch:x86
bebcd9bc5da10741154af689b20a5ad4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
PatBlt
SetTextColor
LineTo
SetStretchBltMode
GetStockObject
CreatePen
GetClipBox
RectVisible
GetTextMetricsA
SetTextAlign
SetMapMode
GetDeviceCaps
CreateSolidBrush
SelectObject
SelectPalette
CreateFontIndirectA
GetPixel
GetObjectA
DeleteDC
SaveDC
GetNearestPaletteIndex
CreateCompatibleDC
DeleteObject
CreatePalette
user32
GetDesktopWindow
TranslateMessage
CharNextA
GetDC
GetParent
GetSystemMetrics
kernel32
GetCurrentThread
GetVersion
GetUserDefaultLangID
GetCurrentProcessId
GetDriveTypeA
GetOEMCP
MulDiv
GetModuleHandleW
CopyFileA
GetCommandLineA
DeleteFileW
QueryPerformanceCounter
GetConsoleOutputCP
GlobalFindAtomA
GetProcessHeap
lstrcmpA
lstrlenW
GetCurrentThreadId
GetThreadLocale
GetModuleHandleA
lstrlenA
SetCurrentDirectoryA
lstrcmpiW
GetACP
DeleteFileA
RemoveDirectoryA
GetWindowsDirectoryA
GetCommandLineW
IsDebuggerPresent
GetTickCount
RemoveDirectoryW
GetStartupInfoA
ExitProcess
GetCurrentProcess
VirtualAlloc
glu32
gluQuadricCallback
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ