Static task
static1
Behavioral task
behavioral1
Sample
9bff2437da08046814587af00c1261d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9bff2437da08046814587af00c1261d7.exe
Resource
win10v2004-20231215-en
General
-
Target
9bff2437da08046814587af00c1261d7
-
Size
65KB
-
MD5
9bff2437da08046814587af00c1261d7
-
SHA1
e44bbab324668e270040e63147f58b41f427d38a
-
SHA256
716baa5bbfb363a3bea2c1d1ea43601528724dd3039ecdfaee3aaf844ab96317
-
SHA512
0fea5c8388a4ddcc86bf10e3d9c292121d227e898c386aea59a2f511952a6c75feb0957bf4d4fb6ca2b0dc37d457f51e0bbcf7594a79031a1812f4b3c6891b03
-
SSDEEP
768:W5WIiOpS9b+h5wHrLvrp982A7EcRLo6PpkHVNYC0hHSdQQZHkxR9ryO7K/oesHtx:+iOsOwLx982VcsipkHHYMNZHkJmATkM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bff2437da08046814587af00c1261d7
Files
-
9bff2437da08046814587af00c1261d7.exe windows:5 windows x86 arch:x86
6f2714ddc472d85aff02c75b06a589c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
LoadLibraryA
user32
EnableMenuItem
EndDialog
GetDlgItemTextW
GetKeyState
DialogBoxParamW
LoadCursorW
SendDlgItemMessageW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
DefWindowProcW
GetWindowLongW
advapi32
RegOpenKeyExW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ