Static task
static1
Behavioral task
behavioral1
Sample
b98d06a745a5a55594f4c166c6632d87.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b98d06a745a5a55594f4c166c6632d87.exe
Resource
win10v2004-20240226-en
General
-
Target
b98d06a745a5a55594f4c166c6632d87
-
Size
109KB
-
MD5
b98d06a745a5a55594f4c166c6632d87
-
SHA1
c60b8412802da69e784f23f936f2c0e720c6d8f0
-
SHA256
e459e83c9bc3e5c23fd92e9d7eb7bda4799a5c886397ec212fef7d98cbb43ea3
-
SHA512
99279dfb881281805bc49434136f9549e6783c881a8286c887d9ad4f06252abe95329938528184920f1fd6c8fe219b9ee4923ec96395f3649235df34e0276351
-
SSDEEP
1536:guUPbYcivW+8piyPMm5osNOQYBnPjD2znOvN7BotJBSweo2A3hnEkb9Bzx4:lUDYcUW+8pBIS1snbCjOQFPD2+Bzx4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98d06a745a5a55594f4c166c6632d87
Files
-
b98d06a745a5a55594f4c166c6632d87.exe windows:4 windows x86 arch:x86
c3d60fcc299ddc8285372e692178a2bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
GetTextMetricsA
RectVisible
SetTextColor
DeleteObject
SelectObject
SetStretchBltMode
RestoreDC
CreateCompatibleDC
SaveDC
LineTo
DeleteDC
CreatePalette
GetPixel
GetStockObject
SelectPalette
GetDeviceCaps
GetClipBox
CreateSolidBrush
SetMapMode
user32
CharNextA
TranslateMessage
GetParent
GetSystemMetrics
GetDesktopWindow
GetDC
kernel32
GlobalFindAtomA
lstrlenW
lstrlenA
QueryPerformanceCounter
lstrcmpiW
lstrcmpiA
lstrcmpA
GetWindowsDirectoryA
GetModuleHandleA
CopyFileA
RemoveDirectoryA
DeleteFileA
GetCommandLineA
GetSystemTime
RemoveDirectoryW
FindClose
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ