Static task
static1
Behavioral task
behavioral1
Sample
9c4a5f8696fbb8edd0736525b297efbb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c4a5f8696fbb8edd0736525b297efbb.exe
Resource
win10v2004-20231215-en
General
-
Target
9c4a5f8696fbb8edd0736525b297efbb
-
Size
49KB
-
MD5
9c4a5f8696fbb8edd0736525b297efbb
-
SHA1
03228de595dd0fd1778bd870ac7c5566031cf1ec
-
SHA256
47ee800146aafb23f330c60ec3058467573f1333c4c9f46fe771613928082088
-
SHA512
329d007c06556f7a6d848d5989782d7a8cd57998899ade27403ce0cbdfb64725bd96f36b7552204380a0a21db9a83e3ba6b946e3fb3a020a3db59ed872952aaf
-
SSDEEP
768:QuOxow8FdRFS07wANo+nvj2qkdJoswv/3ZwDENGWH3+LIb:QuOAd3S07weoUj2ZJgnHNdH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c4a5f8696fbb8edd0736525b297efbb
Files
-
9c4a5f8696fbb8edd0736525b297efbb.exe windows:5 windows x86 arch:x86
da64162564eda3ef8327b10813969d36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
GetExitCodeProcess
GetOEMCP
TlsSetValue
GlobalDeleteAtom
SetConsoleCP
IsDBCSLeadByte
SetFileApisToOEM
GetBinaryTypeW
SetErrorMode
GetModuleHandleW
ConvertDefaultLocale
GetModuleHandleA
ResetEvent
MoveFileA
user32
DestroyMenu
ShowWindowAsync
BeginDeferWindowPos
DestroyWindow
LoadImageW
GetMenu
GetCaretBlinkTime
ShowCursor
AdjustWindowRect
FindWindowW
CreateCaret
GetMenuStringA
UpdateWindow
IsCharAlphaW
shlwapi
PathFindFileNameW
PathBuildRootW
StrCatW
gdi32
GetViewportOrgEx
RealizePalette
MoveToEx
GetTextExtentPointA
SetBrushOrgEx
GetDIBits
DeleteObject
StartPage
CreateDiscardableBitmap
AddFontResourceW
CreateRectRgn
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IM_Mem Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Mem_0 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmem Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Mem_1 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EX_Mem Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ