Static task
static1
Behavioral task
behavioral1
Sample
9c660e512035bf4710a6ce7aa78e03d6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9c660e512035bf4710a6ce7aa78e03d6.exe
Resource
win10v2004-20231222-en
General
-
Target
9c660e512035bf4710a6ce7aa78e03d6
-
Size
3.4MB
-
MD5
9c660e512035bf4710a6ce7aa78e03d6
-
SHA1
5338d8f20a3ae255065aa0ce133cd99dcec9a391
-
SHA256
7adceebda2fd2e3fb0bfc2d593c815b0b053ee3bc9ec22e4d4ae26dd2a49c3da
-
SHA512
c7bb1471795944c991d3fbd27e5d5173e65ad729e807d9d2607e214d2f3a70a7f88dd0becda5f283707d51c8b00c096210b8c73a34f45a4a052788c3941398f5
-
SSDEEP
98304:qiwZGYm0/bNl+WFZ9WVfGJFacjzOaH5fWB0:q7GCNlbbafxcjzOaFW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c660e512035bf4710a6ce7aa78e03d6
Files
-
9c660e512035bf4710a6ce7aa78e03d6.exe windows:4 windows x86 arch:x86
cc5d4f7cb0b8dd018af7827ffc0ce0b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
TerminateProcess
Sleep
MultiByteToWideChar
WideCharToMultiByte
SetLastError
WaitForSingleObject
GetProcessHeap
ExitProcess
GetStdHandle
FindClose
ReadFile
RaiseException
SetEvent
GetConsoleMode
TlsSetValue
CreateEventW
TlsAlloc
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
GetCPInfo
TlsFree
GetFileAttributesW
CompareStringW
GetStringTypeW
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
VirtualAlloc
ResetEvent
GetVersionExW
CreateFileA
OutputDebugStringW
GetFileSize
EncodePointer
GetModuleHandleExW
GetLocaleInfoW
CreateDirectoryW
UnmapViewOfFile
user32
MessageBoxW
PostQuitMessage
GetDlgItem
GetDC
GetWindowRect
PostMessageW
GetClientRect
SetWindowPos
IsWindow
GetParent
SetWindowTextW
SetFocus
SetForegroundWindow
GetSysColor
EndPaint
BeginPaint
SetCursor
InvalidateRect
RegisterClassW
GetWindowTextW
SystemParametersInfoW
GetKeyState
ClientToScreen
Sections
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE