Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.Win32.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.Win32.exe
Resource
win10v2004-20240226-en
General
-
Target
HEUR-Trojan.Win32.Generic-6b4ebd1662e325156f4ecac1357515d8c6c335e7bb9eba2b0f06652fc334c065
-
Size
75KB
-
MD5
278fe81e8f9186fc44a31e3487b182ee
-
SHA1
c7b10cd1634ae47eb7f8175ab907bdc0a67ab905
-
SHA256
6b4ebd1662e325156f4ecac1357515d8c6c335e7bb9eba2b0f06652fc334c065
-
SHA512
905ed221c0cc0f307a4b180306f637a584c608bdd3615d5fe3468958594de3c6d6a09e3f493c4f25ccef77267c8d1c5621befa13c2785837aa1cae9cd5b263c4
-
SSDEEP
768:YLonByjugARIqN7JD3iQ3LJHhhKEnHqYU420d8fI7GY9ejXGTkUH:YIHgQIqNVx3LJjn351ecGY4j2TkUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.Win32.Generic-6b4ebd1662e325156f4ecac1357515d8c6c335e7bb9eba2b0f06652fc334c065
Files
-
HEUR-Trojan.Win32.Generic-6b4ebd1662e325156f4ecac1357515d8c6c335e7bb9eba2b0f06652fc334c065.exe windows:5 windows x86 arch:x86
a624b58551b12248f78b62ae51484114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UpdateWindow
PostMessageA
kernel32
FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetSystemTime
GetModuleHandleW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ