Static task
static1
Behavioral task
behavioral1
Sample
984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8.exe
Resource
win10v2004-20240226-en
General
-
Target
984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8
-
Size
256KB
-
MD5
4cac491e428fad112b2a0d2921415066
-
SHA1
3863eb881d608ec9e56db22e68720636fad35214
-
SHA256
984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8
-
SHA512
982e4ec659aacda06915b7a72fc7cfd01046fe4912e9ee635fb42b230416846b415551baf265886294e011837cde337052857187ff6f24837cb9c0351e5145a7
-
SSDEEP
6144:3TKldK9/rEZF7zlKZUHM/dH9rxQ0CzHfLy:3Tr9/rEPz0CAdH9bCzH+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8
Files
-
984df2c69ff4ebd0e4810d694dbc8a641d62db459e309968295c6927e87ee9e8.exe windows:4 windows x86 arch:x86
0c3eaeaa0d9e74a48063015211153277
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wbtrv32
ord2
ord3
ord1
odbc32
ord33
ord13
ord61
ord20
ord10
ord4
ord76
ord19
ord72
ord16
ord12
ord30
ord26
ord29
ord9
ord38
ord43
ord49
ord48
ord66
ord32
ord31
ord11
ord3
ord45
ord7
ord41
ord39
ord75
ord24
iafrtmfc
ord40
ord43
ord45
ord53
ord14
ord39
ord36
ord29
ord10
ord27
ord21
ord16
ord33
ord2
ord26
ord25
ord19
ord18
ord17
ord46
ord30
ord32
ord13
ord34
ord63
ord22
ord5
ord38
ord55
ord67
ord31
ord20
mfc42
ord567
ord3723
ord3402
ord5261
ord5290
ord4441
ord415
ord4242
ord6195
ord4284
ord3870
ord4457
ord5144
ord5768
ord6129
ord2414
ord6128
ord1229
ord1175
ord1168
ord2092
ord5484
ord2723
ord2390
ord3059
ord5100
ord5103
ord4467
ord4303
ord3350
ord5012
ord975
ord5472
ord3403
ord2879
ord2878
ord4151
ord6055
ord4077
ord1776
ord4407
ord5237
ord2385
ord5163
ord6374
ord4353
ord5282
ord2649
ord1665
ord3798
ord4837
ord4436
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5252
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4427
ord3623
ord715
ord809
ord674
ord1576
ord556
ord366
ord797
ord825
ord823
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord4424
ord3738
ord561
ord3573
ord3626
ord3663
ord1641
ord2864
ord2379
ord1146
ord2586
ord4078
ord4405
ord5241
msvcrt
_unlink
_lseek
_write
_setmbcp
_controlfp
_except_handler3
exit
__CxxFrameHandler
localtime
time
strlen
sprintf
strcat
strcpy
free
malloc
atoi
strncat
realloc
_errno
_fcvt
_ftol
abs
_itoa
_i64toa
_atoi64
rename
_close
_read
_fstat
_chsize
_setmode
_creat
_lrotl
fwrite
_iob
_open
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_strlwr
kernel32
GetModuleFileNameA
GetStartupInfoA
FindFirstFileA
FindNextFileA
FindClose
GetLastError
GetLocaleInfoA
GetComputerNameA
MultiByteToWideChar
GetACP
GetModuleHandleA
GetCurrentDirectoryA
WideCharToMultiByte
user32
LoadIconA
GetParent
KillTimer
UpdateWindow
EnableWindow
SendMessageA
SetClassLongA
GetSystemMetrics
PostMessageA
PeekMessageA
DispatchMessageA
GetMessageA
TranslateMessage
gdi32
CreateSolidBrush
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyExA
GetUserNameA
shell32
SHAppBarMessage
comctl32
ord17
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ