B:\pskK\HmcdgcZoqiyh4\nQUfxJE\uabyTRe.oNb
Static task
static1
Behavioral task
behavioral1
Sample
9ab379cfd903b5c9ba566baabe3c2565.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ab379cfd903b5c9ba566baabe3c2565.exe
Resource
win10v2004-20231215-en
General
-
Target
9ab379cfd903b5c9ba566baabe3c2565
-
Size
84KB
-
MD5
9ab379cfd903b5c9ba566baabe3c2565
-
SHA1
3649581624a4577d8ce3c92199a15c211fe7d13a
-
SHA256
d2f90e1b4b75fb6e04653cc09ba05dff6ab453f8bce3ed0f8d9e81ace36f89ee
-
SHA512
65f3e78606f2c516a89249ea4f10b69c9ae8a27866a2a49f58fec162c880958d2881c06859a591dfaa251fc249320af9f5415e3d4399bfac256a87bc80065e28
-
SSDEEP
1536:7llAqf5K8N3xkJz3OsUCg4DyLXkYYz2xnhKP9ABAdtXSt+2IUiSoYhJ:nQxJTN5gzL05Cn8OmXoRiSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ab379cfd903b5c9ba566baabe3c2565
Files
-
9ab379cfd903b5c9ba566baabe3c2565.exe windows:5 windows x86 arch:x86
f1310f7ed2f0c5c27b6e2860538c44d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
kernel32
SetupComm
lstrlenA
GetCommState
LoadLibraryW
GlobalFix
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
GetSystemTimeAdjustment
LoadLibraryExW
OpenSemaphoreW
lstrcmpiW
CreateFileMappingA
MapViewOfFile
GetModuleHandleExW
GetTapePosition
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
AdjustWindowRect
GetDialogBaseUnits
ModifyMenuA
GetClipboardOwner
DestroyCursor
MapWindowPoints
gdi32
GetEnhMetaFileHeader
SetMiterLimit
SetDCBrushColor
SetViewportOrgEx
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetEnhMetaFileBits
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ