Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20240226-en
General
-
Target
HEUR-Trojan.Win32.Generic-0966d80a92f4d703953821c4568ff25e0e5a984957c8d1789cad5e22e498bd6f
-
Size
72KB
-
MD5
090c8d0aa55c4d19d4577957b6db2b44
-
SHA1
8e7a9231aa8e2d47055d5212fc997b93cb4e35eb
-
SHA256
0966d80a92f4d703953821c4568ff25e0e5a984957c8d1789cad5e22e498bd6f
-
SHA512
4c8914f1609f7b852471f5399efb47341a8175c6d89742084238c934a9fe282f1a4b4619a3fe1d436be644b3c9fe0ee19ed6915ea82af6d5b279a1eb2d2a1895
-
SSDEEP
1536:Itka3G9MXSRa+ycuCRo0oxNqIxSupVvIC74zbW:Qka29MXZxIY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-0966d80a92f4d703953821c4568ff25e0e5a984957c8d1789cad5e22e498bd6f
Files
-
HEUR-Trojan.Win32.Generic-0966d80a92f4d703953821c4568ff25e0e5a984957c8d1789cad5e22e498bd6f.exe windows:4 windows x86 arch:x86
ea6c8092f8807723f1489f32ba14c9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconW
LoadCursorW
RegisterClassExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW
kernel32
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
VirtualFree
ReadFile
GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetCommandLineW
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapFree
GetEnvironmentStrings
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
gdi32
DeleteObject
CreateSolidBrush
SetTextAlign
GetStockObject
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
DragFinish
ExtractIconA
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ