Static task
static1
Behavioral task
behavioral1
Sample
c36fa481d6b9d4a98a2323471c90b2f7.exe
Resource
win7-20240221-en
General
-
Target
c36fa481d6b9d4a98a2323471c90b2f7
-
Size
224KB
-
MD5
c36fa481d6b9d4a98a2323471c90b2f7
-
SHA1
a9e8bfab60e07aa13e64e4c58513cd659e73fc19
-
SHA256
6b47294438a161312ef7048b1ac6c930ca994a32a843213f0a1ade90dcee9fbe
-
SHA512
a94a02c331524ba074b5e3aafbfa4852b43a870a48374eda157c2e1e64d97719cad15cf2c376a109e06bb53f2728eaa63018a4bed1943a928baf7db083e25281
-
SSDEEP
3072:/b8HR3lXl8A3eVdcf1Adqt3tpZYPkQrkGYOQ9ztpyW6YWizUbWPmvd9n:/g9/uIpUjrkGY2W6YWizU3vb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c36fa481d6b9d4a98a2323471c90b2f7
Files
-
c36fa481d6b9d4a98a2323471c90b2f7.exe windows:4 windows x86 arch:x86
39e44c0caad4b7cd86da6dfe2eb99abb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
Sleep
VirtualAlloc
FlushFileBuffers
SetEvent
FileTimeToLocalFileTime
OpenMutexA
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
LocalReAlloc
CreateTimerQueue
IsBadCodePtr
FindClose
VirtualAllocEx
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
VirtualProtect
VirtualLock
ResetEvent
CreateEventA
HeapReAlloc
HeapAlloc
GetCPInfo
GetSystemInfo
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
user32
LoadCursorA
GetDesktopWindow
GetDC
EnumChildWindows
IsIconic
SetTimer
ReleaseDC
CreateIcon
SetCursorPos
GetWindowRect
SetCursor
DrawTextA
EnumWindows
GetCursorPos
gdi32
SelectObject
PatBlt
CreateDIBPatternBrushPt
shell32
DuplicateIcon
psapi
GetModuleBaseNameA
GetModuleInformation
msvfw32
ICInstall
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ