Static task
static1
Behavioral task
behavioral1
Sample
9b3f32096e8f07090ffe4c1f031ca4bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b3f32096e8f07090ffe4c1f031ca4bc.exe
Resource
win10v2004-20231215-en
General
-
Target
9b3f32096e8f07090ffe4c1f031ca4bc
-
Size
84KB
-
MD5
9b3f32096e8f07090ffe4c1f031ca4bc
-
SHA1
4b27db049d82ba6994336d280da4962fdd4d9eb8
-
SHA256
96073260569c85ec80c7e34b08094097b9450d586d69ff9360c9062ea60d1cec
-
SHA512
09ebb737b3f4efd1f20bd1ff0307c9f3c165f1e035478ff583af830eaba6d72e4ec531587b4b0d0529edd719ce445478b8e534283aa2284652d6c78a216e6ccb
-
SSDEEP
1536:NkQ0T+/7lNo38OU2ZOTGGvoegJ0Kx2cbd:NkQp7lN876vTmbx2K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b3f32096e8f07090ffe4c1f031ca4bc
Files
-
9b3f32096e8f07090ffe4c1f031ca4bc.exe windows:4 windows x86 arch:x86
09926ea9470ef7d228787fe100b86f94
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIconSize
ImageList_Create
ImageList_EndDrag
ImageList_AddIcon
ImageList_Read
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_Copy
InitCommonControls
ImageList_GetImageCount
ImageList_DragLeave
ImageList_GetImageRect
ImageList_Merge
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_AddMasked
ImageList_EndDrag
ImageList_DragMove
ImageList_DragLeave
ImageList_EndDrag
ImageList_LoadImageA
ImageList_DragMove
ImageList_LoadImage
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_AddIcon
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_Create
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_Replace
ImageList_DragEnter
ImageList_GetIcon
advapi32
RegCreateKeyExA
RegDeleteValueA
RegLoadKeyA
RegEnumValueA
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegReplaceKeyW
RegEnumValueW
RegQueryInfoKeyA
RegDeleteKeyW
RegGetKeySecurity
RegOpenKeyExW
RegOpenKeyW
RegGetKeySecurity
RegEnumValueW
RegReplaceKeyW
RegQueryValueA
RegFlushKey
RegQueryInfoKeyA
RegQueryValueExW
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegDeleteValueW
RegLoadKeyW
RegOpenKeyW
RegDeleteValueA
RegCreateKeyExW
RegDeleteKeyW
user32
EndDialog
AppendMenuW
DrawIconEx
GetDlgItem
BlockInput
GetDC
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthA
LoadMenuA
DrawTextA
DrawTextW
InsertMenuA
CopyRect
GetMenu
IsWindow
AppendMenuA
kernel32
CopyFileA
GetConsoleMode
FindFirstFileA
DeleteAtom
GetLastError
CreateProcessA
CopyFileExA
DeleteFileW
CreateDirectoryA
GetComputerNameA
SetLastError
ReadConsoleA
GetStdHandle
CopyFileExW
GlobalFree
WriteFile
gdi32
DeleteObject
CloseFigure
ExtTextOutA
BitBlt
CreateSolidBrush
AddFontResourceExA
GetPixel
CopyMetaFileA
GetBitmapBits
GetCurrentPositionEx
GetClipBox
DeleteDC
ExcludeClipRect
BeginPath
GetPixel
GetDCOrgEx
AddFontMemResourceEx
AddFontResourceA
CancelDC
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ