Static task
static1
Behavioral task
behavioral1
Sample
a9da5883c7a4c797826dafabd8c9ebdb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9da5883c7a4c797826dafabd8c9ebdb.exe
Resource
win10v2004-20240226-en
General
-
Target
a9da5883c7a4c797826dafabd8c9ebdb
-
Size
966KB
-
MD5
a9da5883c7a4c797826dafabd8c9ebdb
-
SHA1
79640b2af489b88a1d91bfbbc56adb300a0ed2e7
-
SHA256
bdc83da670bd064ab2163c2271c14ebd762695573ec3ee304fcd77fd73855362
-
SHA512
b77ad14f396ba47d81a14f4a9d32d6c31c38597ee3fba2838704eb2215329bf403b50c19f1d951263ab21b03c4fd22aec0fd20e36792fe81874e23103cb91a16
-
SSDEEP
24576:cSsL9YjUyJBsUbh86vYBpffr89ny8eOS17:cthY7mlB69eOS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9da5883c7a4c797826dafabd8c9ebdb
Files
-
a9da5883c7a4c797826dafabd8c9ebdb.exe windows:4 windows x86 arch:x86
8b9199397385784b7ec807f95b154cae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
GetDlgItem
GetWindowLongA
GetClientRect
SendDlgItemMessageA
SetActiveWindow
SetWindowTextA
GetSysColor
InvalidateRect
SetWindowLongA
OffsetRect
GetFocus
DrawTextA
ScreenToClient
MessageBoxA
EndPaint
GetMessageA
SetCapture
GetKeyState
BeginPaint
TranslateMessage
SetCursorPos
PeekMessageA
DefWindowProcA
GetCursorPos
SetTimer
ReleaseCapture
GetClassNameA
GetForegroundWindow
GetWindow
GetWindowRect
GetDC
ShowCursor
ReleaseDC
EndDialog
SetWindowPos
DialogBoxParamA
SetDlgItemTextA
WaitForInputIdle
GetDesktopWindow
GetParent
EnumWindows
PostMessageA
GetWindowThreadProcessId
RegisterClassExA
GetTopWindow
FindWindowA
UpdateWindow
LoadImageA
KillTimer
SendMessageA
GetActiveWindow
SetRect
DispatchMessageA
GetSystemMetrics
IsIconic
ClientToScreen
ClipCursor
ShowWindow
CreateWindowExA
SetFocus
LoadIconA
SetForegroundWindow
GetLastActivePopup
PtInRect
kernel32
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalMemoryStatus
Sleep
CreateEventA
GetDiskFreeSpaceA
CloseHandle
CreateFileA
GetFileAttributesA
EnterCriticalSection
FindFirstFileA
InitializeCriticalSection
FindNextFileA
CreateProcessA
GetDriveTypeA
GetLogicalDriveStringsA
SetEvent
ResetEvent
WaitForMultipleObjects
GetUserDefaultLangID
GetLocalTime
lstrcpynA
SetUnhandledExceptionFilter
IsBadReadPtr
FormatMessageA
CompareFileTime
FindResourceA
LoadResource
SizeofResource
LockResource
WaitForSingleObject
DeleteFileA
MulDiv
FileTimeToSystemTime
FileTimeToLocalFileTime
SetConsoleCtrlHandler
ExitThread
CreateThread
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetFilePointer
LeaveCriticalSection
HeapFree
VirtualFree
HeapCreate
CreateDirectoryA
GetFileSize
FreeLibrary
IsDBCSLeadByte
SetFileAttributesA
GetComputerNameA
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
FindClose
LoadLibraryA
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetModuleHandleA
WriteFile
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
ReadFile
RaiseException
winmm
waveInAddBuffer
SendDriverMessage
midiOutReset
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 469KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ