Static task
static1
Behavioral task
behavioral1
Sample
983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29N.exe
Resource
win10v2004-20240802-en
General
-
Target
983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29N
-
Size
242KB
-
MD5
fb07b94740cee6cc61e3d9e2541889f0
-
SHA1
c3bd9ee7828529a4094143365ab99d006f0fe482
-
SHA256
983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29
-
SHA512
e45f41ad053a3fb8a58d5ee4adef62909b920ef37f89df99e030853757e56c2d23a3721178c1aa2ba3eec7f0853e48ba013cf63a76cdd7e6456b8916b0237db0
-
SSDEEP
6144:SvZR8D2L+mqP/lH8nNnlfttDkJsZLX0tTMPd/:SvZiqL+mUwXTIoLX0tgPd/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29N
Files
-
983ad52b545c765c2136b4682023efb207db0b0b1653e4b9951b1798da7d3e29N.exe windows:4 windows x86 arch:x86
877a9fc2fb535473e4afdd10f8d5f137
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalAppExitA
GetVersionExW
GetCurrentThreadId
GetProcAddress
CreateMutexA
ReplaceFileW
LoadLibraryExA
lstrcpyW
GetSystemDefaultLCID
IsDebuggerPresent
HeapCreate
CreatePipe
GetEnvironmentVariableA
FindResourceW
lstrlenA
GetThreadPriority
FindAtomW
GetCPInfo
GetTempFileNameA
user32
EndMenu
CreatePopupMenu
MonitorFromWindow
CreateMenu
AdjustWindowRect
WinHelpA
InsertMenuItemA
MoveWindow
GetMenuInfo
LoadMenuA
DialogBoxParamW
GetKeyboardLayout
GetKeyState
GetDCEx
IsMenu
UpdateLayeredWindow
EnableWindow
CreateDialogParamA
RegisterClassW
DefWindowProcA
GetSubMenu
PostQuitMessage
CharLowerA
GetActiveWindow
CopyRect
RegisterWindowMessageW
LoadCursorA
LoadImageA
SendDlgItemMessageW
GetCursorPos
WaitMessage
GetFocus
OpenClipboard
UnregisterClassW
CreateDialogIndirectParamW
GetCaretPos
FindWindowA
SetActiveWindow
CharUpperW
GetWindowRgn
keybd_event
DestroyIcon
GetClassInfoExA
GetDesktopWindow
FindWindowW
LoadBitmapA
LoadIconW
EnumClipboardFormats
GetIconInfo
IsIconic
AppendMenuW
RegisterClassA
SetWindowPos
MessageBeep
LoadMenuW
CreateWindowExW
MessageBoxW
GetMenuItemInfoW
SendDlgItemMessageA
GetDlgItemInt
CharLowerW
DestroyMenu
GetMenuItemRect
MonitorFromRect
GetClassInfoExW
RegisterClassExW
GetDlgItemTextA
GetCapture
MonitorFromPoint
IsChild
GetScrollPos
CharPrevA
SetDlgItemTextA
TrackPopupMenu
DestroyCursor
CreateAcceleratorTableA
MessageBoxA
RegisterWindowMessageA
IsDlgButtonChecked
gdi32
RemoveFontResourceA
CreateHatchBrush
CreatePolygonRgn
CreateColorSpaceW
GetEnhMetaFileW
CreateDIBPatternBrushPt
CreateFontIndirectA
CreateDIBPatternBrush
shell32
ExtractAssociatedIconExW
StrRChrA
ExtractIconW
ShellExecuteExA
SHGetDiskFreeSpaceExW
FreeIconList
ShellExecuteEx
StrRStrIW
SHCreateDirectoryExA
SHGetDataFromIDListW
SHGetDiskFreeSpaceA
StrStrIA
StrNCmpIA
StrRStrW
ShellExecuteW
Sections
.U Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jC Size: 4KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LRK Size: 1KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 3KB - Virtual size: 486KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ucKPZR Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pWz Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.o Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sjcOq Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.an Size: 12KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ