e:\bey
Static task
static1
Behavioral task
behavioral1
Sample
c9a693a9062f82bf7d87808b7f4b7209.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9a693a9062f82bf7d87808b7f4b7209.exe
Resource
win10v2004-20240226-en
General
-
Target
c9a693a9062f82bf7d87808b7f4b7209
-
Size
592KB
-
MD5
c9a693a9062f82bf7d87808b7f4b7209
-
SHA1
2632f56d6bc091a48f29a2d8f9becf6c07afb85b
-
SHA256
d9b93106762635673acacb3fb86acd32bf20fb9708f3ba1e9a49f0a6f6e536d9
-
SHA512
9b9c7e930f38a09685daef94158ed9e5e3f20aae82be8051a0a75cae6a615cc3e5ef140ac69d990f64228bb87b9f42a53ee398f9b0f08e2260944777cc8944df
-
SSDEEP
12288:0H1UaNMaee2ICsR5h1Bhv/zgT4ZsBjU5M:s15NMafdbBkTpBI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9a693a9062f82bf7d87808b7f4b7209
Files
-
c9a693a9062f82bf7d87808b7f4b7209.exe windows:4 windows x86 arch:x86
2125dc483e5a13bfba2c8b6beb126401
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetSetCookieW
InternetCombineUrlA
InternetCombineUrlW
ReadUrlCacheEntryStream
user32
DdeUnaccessData
DestroyIcon
WinHelpA
LoadCursorFromFileW
DispatchMessageA
DdeQueryNextServer
CopyRect
OpenClipboard
SetMenuContextHelpId
DdeConnect
DialogBoxIndirectParamA
ShowOwnedPopups
SetRect
ShowWindow
SetWindowsHookExA
HideCaret
SendInput
CharUpperBuffW
RemovePropA
DefFrameProcA
MessageBoxW
GetCursorPos
DlgDirSelectExW
DestroyWindow
IsDialogMessageA
KillTimer
PeekMessageW
CreateCursor
GetUpdateRgn
CharNextExA
LoadCursorA
SetClassWord
GetWindowModuleFileNameA
TileWindows
GrayStringW
MessageBoxA
GetDCEx
GetMenuInfo
SetCaretBlinkTime
SetWindowLongA
GetCursorInfo
RegisterClassExA
DlgDirListComboBoxA
BroadcastSystemMessage
LoadImageW
LoadStringW
FindWindowExW
CreateDesktopA
RegisterClassA
CopyAcceleratorTableA
BroadcastSystemMessageW
GetMessageTime
CreateWindowExW
DestroyAcceleratorTable
InSendMessageEx
FlashWindow
InternalGetWindowText
DefWindowProcW
RegisterHotKey
comctl32
ImageList_GetImageCount
DrawInsert
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_AddIcon
CreateToolbar
DrawStatusTextW
ImageList_SetFilter
ImageList_GetIconSize
CreateUpDownControl
ImageList_SetImageCount
CreatePropertySheetPageW
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_GetBkColor
ImageList_SetFlags
ImageList_Remove
ImageList_BeginDrag
CreatePropertySheetPage
MakeDragList
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_GetFlags
shell32
SHChangeNotify
SHBrowseForFolderW
comdlg32
FindTextA
kernel32
ResetEvent
GetFileType
GetModuleFileNameA
GetVolumeInformationW
GetSystemTimeAsFileTime
OpenEventA
LoadResource
GetCPInfo
GetLocaleInfoA
InterlockedDecrement
InitializeCriticalSection
FreeEnvironmentStringsA
SetCurrentDirectoryW
GetTempFileNameW
CreateMutexA
LCMapStringW
SetSystemTime
TlsGetValue
GetSystemInfo
SuspendThread
SetStdHandle
HeapFree
GetLocaleInfoW
HeapAlloc
LCMapStringA
WaitForMultipleObjects
SetLastError
LoadModule
CloseHandle
VirtualAlloc
CompareStringW
GetLongPathNameA
GetPrivateProfileStringA
TlsAlloc
ReadConsoleInputA
ReadConsoleOutputW
SetFilePointer
HeapCreate
GetStdHandle
LoadLibraryA
VirtualFree
TlsSetValue
GetStartupInfoW
GetEnvironmentVariableW
GetProcAddress
EnumDateFormatsExA
TlsFree
GetUserDefaultLangID
InterlockedIncrement
LocalSize
GetStringTypeW
GetComputerNameA
FlushViewOfFile
HeapReAlloc
GetStringTypeA
UnhandledExceptionFilter
lstrcmpiA
GetCurrentThreadId
OpenMutexA
CreateWaitableTimerW
RtlUnwind
TerminateProcess
CompareStringA
GetCurrentProcessId
GetConsoleOutputCP
MultiByteToWideChar
SetConsoleOutputCP
WideCharToMultiByte
GetModuleFileNameW
FlushInstructionCache
ReleaseSemaphore
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesW
GetVersion
GetPriorityClass
GlobalGetAtomNameW
FlushFileBuffers
DeleteCriticalSection
FreeEnvironmentStringsW
HeapDestroy
GetEnvironmentStringsW
LeaveCriticalSection
FillConsoleOutputCharacterA
SetFileAttributesW
WriteFile
EnterCriticalSection
SetEnvironmentVariableA
ExitProcess
GetLastError
GlobalFlags
AddAtomW
SetHandleCount
GetCommandLineA
GetSystemTime
InterlockedExchange
GetTimeFormatW
SleepEx
IsBadWritePtr
QueryPerformanceCounter
GetProcessShutdownParameters
GetCurrentProcess
ReadFile
GetTickCount
GetStartupInfoA
GetCommandLineW
GetFileAttributesW
GetConsoleMode
GetProcAddress
GetConsoleCursorInfo
GetModuleHandleA
lstrcpy
GetTimeZoneInformation
GetEnvironmentStrings
VirtualQuery
GetLocalTime
GetCurrentThread
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ