Static task
static1
Behavioral task
behavioral1
Sample
91d36df0e536a44af19336ebd434ef70N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
91d36df0e536a44af19336ebd434ef70N.exe
Resource
win10v2004-20240709-en
General
-
Target
91d36df0e536a44af19336ebd434ef70N.exe
-
Size
642KB
-
MD5
91d36df0e536a44af19336ebd434ef70
-
SHA1
fc598155cba98abb45d5229453cb8226ecfaadd9
-
SHA256
02f9f904e53677aad9a5f350ee64b94c6109115e89a0195d27b01ac9caf5f539
-
SHA512
08759105e20956aaf09b933fe67b187f799f4abf3c9700bf0d73586e5af2cfe1aa208c529a8bb88d0719740286ba90b8e91c4be256e5bc164b33e2b6ab75c90c
-
SSDEEP
12288:nxBputUUZyTYqC3XpYYm9E0lvjaE9zt6WxF6dBRlz:nx4ZfqmXOf9E0lLaE9ztXqRl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91d36df0e536a44af19336ebd434ef70N.exe
Files
-
91d36df0e536a44af19336ebd434ef70N.exe.exe windows:6 windows x86 arch:x86
90045948f2ffabc2b7089e09ac81684a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
GetUserDefaultLCID
IsValidCodePage
comctl32
InitCommonControlsEx
imm32
ImmSimulateHotKey
iphlpapi
InternalDeleteIpForwardEntry
user32
MoveWindow
GetSubMenu
WaitMessage
LoadIconW
GetDlgItemTextW
BeginPaint
CheckDlgButton
GetDC
UpdateWindow
PtInRect
MessageBoxW
ReleaseCapture
IsDlgButtonChecked
GetWindowPlacement
WinHelpW
SendMessageW
LoadBitmapW
GetMessageW
FrameRect
SetDlgItemTextW
InvalidateRect
GetDlgItem
DispatchMessageW
GetMenu
DestroyWindow
DialogBoxParamW
DrawTextW
RegisterClassW
InvertRect
PeekMessageW
UnionRect
CreateWindowExW
wsprintfW
EndDialog
OffsetRect
GetForegroundWindow
GetClientRect
LoadAcceleratorsW
FillRect
EnableMenuItem
EndPaint
DefWindowProcW
GetDesktopWindow
IntersectRect
GetSystemMetrics
ShowWindow
GetWindowRect
LoadCursorW
TranslateAcceleratorW
CheckRadioButton
SetRect
SetCapture
DrawMenuBar
IsZoomed
PostMessageW
ReleaseDC
Sections
.text Size: 242KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 205KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ