Static task
static1
Behavioral task
behavioral1
Sample
b83f9d710264a26cbe2cd36a3de05088.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b83f9d710264a26cbe2cd36a3de05088.exe
Resource
win10v2004-20240226-en
General
-
Target
b83f9d710264a26cbe2cd36a3de05088
-
Size
1.2MB
-
MD5
b83f9d710264a26cbe2cd36a3de05088
-
SHA1
2c6fbb339beabc4b092323436ff63986e887aa79
-
SHA256
7ca4912fa1e45bc87cfcaa758177e533e09a0862b3b77f87578d87a9a8960e20
-
SHA512
99ffad9a48ddd3dac4f3d82e43708088dc5a6e88023e3c8f5475fd156a4867a444b56c4180d2356ca93559baa04a7337f24c3a8522b2124b5ebf7583d781fc8c
-
SSDEEP
12288:xeXr/Cm+XQ9i8aMVkUet7EwBI+APutDrVkP+xnXOBI+AM0I:xGr/Cm+X18zVkUetVI5ut/VkP+x6IS0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b83f9d710264a26cbe2cd36a3de05088
Files
-
b83f9d710264a26cbe2cd36a3de05088.exe windows:4 windows x86 arch:x86
2351e714d9783912c3c5d84368818046
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetWindowsDirectoryA
SetFileAttributesA
GetDriveTypeA
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindNextFileA
CloseHandle
GetFileSize
CreateFileA
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Process32Next
Sleep
CreateToolhelp32Snapshot
GetSystemDirectoryA
CreateThread
GetLastError
CreateMutexA
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WinExec
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
Process32First
GetModuleFileNameA
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
HeapAlloc
RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
user32
SendMessageA
MessageBoxA
FindWindowA
BlockInput
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
ShowWindow
SetWindowTextA
advapi32
RegQueryValueExA
GetUserNameA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
ShellExecuteA
winmm
mciSendStringA
Sections
.petite Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE