Static task
static1
Behavioral task
behavioral1
Sample
b9995e130542911ae33c927537305045.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9995e130542911ae33c927537305045.exe
Resource
win10v2004-20240226-en
General
-
Target
b9995e130542911ae33c927537305045
-
Size
149KB
-
MD5
b9995e130542911ae33c927537305045
-
SHA1
1cf1a770e08ada44eee2d3cdb7601dec95b2f74a
-
SHA256
dd322c75411e160133a3e19c355096107521e8fff29aa368a85ab8ba20b50ef9
-
SHA512
11cfdd69b301ced3c214852e3c4ce762e92bc2dea97a05e6973f2b09f024bf025f3bec1d3eecc21537a95833607d5c4406351d1db0d37efdaf01492499ca45da
-
SSDEEP
3072:4gMmFqg5M5vi3OP8hh7+FAItbI7ip/E++tx7wyP:fFqoM5q3SW713p++th
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9995e130542911ae33c927537305045
Files
-
b9995e130542911ae33c927537305045.exe windows:5 windows x86 arch:x86
94deb6ff8455dd99083125ea6d31b5f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??1type_info@@UAE@XZ
__CxxFrameHandler
_time64
_localtime64
iswctype
wcsncpy
memset
??3@YAXPAX@Z
wcsncmp
memcpy
_wtol
_CxxThrowException
_except_handler3
kernel32
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
ExitProcess
CreateFileA
lstrcmpA
lstrlenA
lstrcpynA
WriteFile
lstrcatA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
GetCommandLineW
LocalUnlock
FindFirstFileW
GetLocaleInfoW
lstrcpynW
MulDiv
CreateFileW
CompareStringW
lstrcmpW
lstrlenW
LocalLock
GlobalFree
FindClose
LocalAlloc
FoldStringW
lstrcatW
LocalFree
lstrcpyW
GetDateFormatW
GetUserDefaultLCID
GetTimeFormatW
GetLocalTime
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
GetUserDefaultLangID
WideCharToMultiByte
FormatMessageW
LocalReAlloc
GetACP
MultiByteToWideChar
SetLastError
CreateFileMappingW
DeleteFileW
GetFileInformationByHandle
lstrcmpiW
LocalSize
GlobalLock
GlobalUnlock
GetCPInfo
IsDBCSLeadByte
user32
DrawTextExW
GetWindowTextW
PeekMessageW
CreateDialogParamW
EnableWindow
CharLowerW
SetWindowPlacement
GetSystemMenu
IsWindowVisible
EqualRect
GetCursorPos
InflateRect
wsprintfA
GetFocus
ClientToScreen
DispatchMessageW
MoveWindow
CheckMenuItem
DefWindowProcW
WinHelpW
SetWindowTextW
GetDlgCtrlID
SendMessageW
SetDlgItemTextW
GetDlgItemTextW
GetSystemMetrics
MessageBoxW
OpenClipboard
GetDesktopWindow
SendDlgItemMessageW
EndDialog
GetMenuState
EnableMenuItem
ReleaseDC
InvalidateRect
GetKeyboardLayout
LoadIconW
IsDialogMessageW
GetMenu
GetForegroundWindow
ChildWindowFromPoint
TranslateMessage
GetDC
wsprintfW
SetFocus
MessageBeep
IsClipboardFormatAvailable
DialogBoxParamW
GetSubMenu
PostMessageW
IsIconic
CharNextW
PostQuitMessage
GetMessageW
SetActiveWindow
ScreenToClient
TranslateAcceleratorW
CloseClipboard
SetCursor
DestroyWindow
GetWindowLongW
UpdateWindow
SetScrollPos
CreateWindowExW
ShowWindow
LoadStringW
SetWindowLongW
CharUpperW
GetWindowPlacement
RegisterClassExW
LoadAcceleratorsW
GetClientRect
LoadCursorW
LoadImageW
RegisterWindowMessageW
shell32
DragQueryFileW
DragAcceptFiles
DragFinish
ShellAboutW
shlwapi
SHGetValueA
gdi32
GetBkMode
EndPage
GetTextExtentPoint32W
GetTextMetricsW
LPtoDP
SetWindowExtEx
StartPage
DeleteDC
SetAbortProc
CreateDCW
SetBkMode
SetMapMode
StartDocW
SetViewportExtEx
TextOutW
EndDoc
EnumFontsW
SelectObject
GetObjectW
GetTextFaceW
GetStockObject
CreateFontIndirectW
GetDeviceCaps
DeleteObject
GetBkColor
comdlg32
PageSetupDlgW
PrintDlgExW
CommDlgExtendedError
GetFileTitleW
FindTextW
GetSaveFileNameW
ReplaceTextW
GetOpenFileNameW
ChooseFontW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
IsTextUnicode
RegSetValueExW
RegCloseKey
RegCreateKeyW
winspool.drv
ClosePrinter
GetPrinterDriverW
OpenPrinterW
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ