Static task
static1
Behavioral task
behavioral1
Sample
9704d34c061b9eead41c375221175ec7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9704d34c061b9eead41c375221175ec7.exe
Resource
win10v2004-20231215-en
General
-
Target
9704d34c061b9eead41c375221175ec7
-
Size
122KB
-
MD5
9704d34c061b9eead41c375221175ec7
-
SHA1
7f1b7c004a26685d1065779f9ccd34fbc3fa7c22
-
SHA256
46d247280e1ac1359d0087eb5d4287afaa41eac074d48b922c0f12eeddc9ce8b
-
SHA512
d5d83ed6ca7f1c9f67936f19cc8c079f53e2f41c4467f5059e654f8eed01881b2b2cc6b697b322b4e3bddbdffc0e1cc1c365744922bae5956f39b5db248deae9
-
SSDEEP
1536:7vDtfnRg+Rbu7fElW+cNmTekt3FK5HwdVJsyrhKJ5/WN0cK6cMY+tGHfHJjG7:TDtrlW+xt1EHwqKeDT4YwcJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9704d34c061b9eead41c375221175ec7
Files
-
9704d34c061b9eead41c375221175ec7.exe windows:4 windows x86 arch:x86
05a43c7888f4ff972914a2812119f9d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libgimpui-2.0-0
gimp_ui_init
gimp_window_set_transient
libglib-2.0-0
g_assert_warning
g_free
g_log
g_malloc
g_malloc0
g_realloc
g_slist_append
libgobject-2.0-0
g_object_get_data
g_object_set_data
g_signal_connect_data
g_type_check_instance_cast
g_type_check_instance_is_a
libgtk-win32-2.0-0
gtk_adjustment_get_type
gtk_adjustment_set_value
gtk_check_button_new_with_label
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_type
gtk_dialog_set_alternative_button_order
gtk_main
gtk_main_quit
gtk_object_get_type
gtk_table_attach
gtk_table_get_type
gtk_table_new
gtk_table_set_col_spacings
gtk_table_set_row_spacings
gtk_toggle_button_get_type
gtk_toggle_button_set_active
gtk_widget_destroy
gtk_widget_get_type
gtk_widget_show
gtk_window_get_type
intl
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_printf
libintl_textdomain
libgimp-2.0-0
gimp_displays_flush
gimp_drawable_bpp
gimp_drawable_detach
gimp_drawable_get
gimp_image_add_vectors
gimp_image_get_selection
gimp_install_procedure
gimp_main
gimp_pixel_rgn_get_pixel
gimp_pixel_rgn_init
gimp_procedural_db_get_data
gimp_procedural_db_get_data_size
gimp_procedural_db_set_data
gimp_progress_init
gimp_progress_update
gimp_selection_bounds
gimp_selection_is_empty
gimp_tile_cache_ntiles
gimp_tile_width
gimp_vectors_bezier_stroke_cubicto
gimp_vectors_bezier_stroke_lineto
gimp_vectors_bezier_stroke_new_moveto
gimp_vectors_new
gimp_vectors_stroke_close
gimp_vectors_stroke_scale
gimp_vectors_stroke_translate
libgimpbase-2.0-0
gimp_locale_directory
libgimpwidgets-2.0-0
gimp_dialog_new
gimp_double_adjustment_update
gimp_help_set_help_data
gimp_scale_entry_new
gimp_standard_help_func
gimp_toggle_button_update
kernel32
ExitProcess
SetUnhandledExceptionFilter
msvcrt
_hypot
__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
acos
atexit
exit
fflush
fmod
fprintf
fwrite
memcpy
perror
printf
signal
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE