Static task
static1
Behavioral task
behavioral1
Sample
921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197.exe
Resource
win10v2004-20240802-en
General
-
Target
921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197
-
Size
23KB
-
MD5
97b75b6ed5cfab625aa343ed904b82ac
-
SHA1
0b2832187b49efbf5652eb46409db002096cfdaa
-
SHA256
921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197
-
SHA512
c087df49d0fbc87cd915d41f29b1a83ea6533eee60235e8e6b73d3be16a245ec21cb3824f94232770a35ba1a5aba85c30f779b68a4017b321670e1a2f4b0fbad
-
SSDEEP
384:IYir3Vf2dzjGdwMZwOvcAr1qXVIT9Ui5ewcjv9L6ppEp7vKz:IrTVuFqbwUcAr1qXVITuX5jFrp78
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197
Files
-
921737ab95f8ca1caac680b10b49c03e84a33e169fdd900ed31ad0f3420b3197.exe windows:5 windows x86 arch:x86
ca4c70b3a69137ec777fc848626a0aaf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
winmm
mciSendStringA
msacm32
acmStreamOpen
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ