Static task
static1
Behavioral task
behavioral1
Sample
9902ad7362d0b5d74635c2b85a59f681.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9902ad7362d0b5d74635c2b85a59f681.exe
Resource
win10v2004-20231215-en
General
-
Target
9902ad7362d0b5d74635c2b85a59f681
-
Size
50KB
-
MD5
9902ad7362d0b5d74635c2b85a59f681
-
SHA1
cdc70befe2dd4e1ef7c8af411c9e42b0bd1e3f56
-
SHA256
9d3bf5a59308b36f65c657d6ab77ffd43d20599e45816fa39002a1f7cb90e34b
-
SHA512
2570d579a7f4a340aa61a34a195dbbb6fe2abacc62a32cb6047d84aaf2c661a178e45fc0379fa0a6b6951884bd7bf43a184aa9bf7011c7d1d2b5d7c7c1472b1c
-
SSDEEP
768:ilUgqLCWBpTvC5GU158+VFi8L5KDLE1LQd7t1JsQDSB30slsZGd:iGCopTKlb8h8LoDLmLWt3sQDtIwGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9902ad7362d0b5d74635c2b85a59f681
Files
-
9902ad7362d0b5d74635c2b85a59f681.exe windows:4 windows x86 arch:x86
c1b726ddd93fe22d9f985b473a4be784
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetCommandLineA
UnlockFile
GetPriorityClass
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
user32
IsIconic
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE