Static task
static1
Behavioral task
behavioral1
Sample
37f5cb4910242368eba4f45fd270d951291e995da34b0bd716e00161664c3021N.exe
Resource
win7-20240903-en
General
-
Target
37f5cb4910242368eba4f45fd270d951291e995da34b0bd716e00161664c3021N
-
Size
411KB
-
MD5
2bfc32971b783999cce4dfc039b8cdb0
-
SHA1
cd1e91d5434897670ad5555c04496bfe19ac49f5
-
SHA256
37f5cb4910242368eba4f45fd270d951291e995da34b0bd716e00161664c3021
-
SHA512
79d7fb9305b31be0d6e915c49a884fc01d78caed860750793e240bcd670f5d09141892c02e0caf37198640016d38a5e5b13be2874968f32958b0e42456b56e8e
-
SSDEEP
12288:/6qsAPVtbj1cThqhZHa9kbWzbWdu4lwtLFl9:/RTttbjahqhZ4NAlwtb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f5cb4910242368eba4f45fd270d951291e995da34b0bd716e00161664c3021N
Files
-
37f5cb4910242368eba4f45fd270d951291e995da34b0bd716e00161664c3021N.exe windows:4 windows x86 arch:x86
18400ec9ae2a09cbead5f0c55d204616
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetModuleFileNameW
CloseHandle
WaitForSingleObject
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
Sleep
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
FindFirstFileW
LocalAlloc
OutputDebugStringW
GetSystemTime
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetTimeFormatW
HeapAlloc
GetProcessHeap
FindNextFileW
LoadLibraryA
GetModuleHandleA
GetFileAttributesW
OutputDebugStringA
GetLocalTime
DeleteFileW
CreateThread
CreateEventW
FindClose
SetLastError
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpiW
ReleaseMutex
CreateMutexW
SizeofResource
LoadResource
FindResourceW
GetModuleHandleW
LoadLibraryExW
LocalFree
GetCurrentProcess
OpenMutexW
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
GetCommandLineA
VirtualProtect
SetEvent
GetTickCount
GetStartupInfoA
user32
CharNextW
LoadStringW
GetSystemMetrics
SendDlgItemMessageW
DestroyMenu
LoadCursorW
SetCursor
MessageBoxW
EndDialog
GetDlgItem
SendMessageW
GetWindowLongW
SetWindowLongW
DialogBoxParamW
SetFocus
DrawFocusRect
GetFocus
GetSysColor
SetWindowTextW
EnableWindow
IsWindowEnabled
LoadMenuW
GetSubMenu
GetMessagePos
TrackPopupMenu
GetActiveWindow
GetDC
MessageBeep
GetWindowTextW
GetWindowTextLengthW
ReleaseDC
PostMessageW
GetClientRect
SystemParametersInfoW
SetDlgItemTextW
ScreenToClient
GetWindowRect
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
ShowWindow
GetParent
SetWindowPos
advapi32
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryInfoKeyW
GetUserNameW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegFlushKey
RegOpenKeyExW
gdi32
SetBkColor
Rectangle
DeleteDC
EndPage
StartPage
EndDoc
GetDeviceCaps
CreateFontIndirectW
DeleteObject
GetStockObject
SelectObject
SetTextColor
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
msvcrt
__p__commode
__getmainargs
_acmdln
exit
_exit
memmove
wcstoul
_wcsnset
wcsstr
_CxxThrowException
strchr
strstr
memset
swscanf
_errno
_XcptFilter
__dllonexit
_lock
_initterm
_adjust_fdiv
_unlock
_vsnwprintf
malloc
iswspace
_onexit
tolower
wcsrchr
_callnewh
free
_wcsicmp
memcpy
wcschr
wcsncmp
_except_handler3
__CxxFrameHandler
__p__fmode
__set_app_type
_controlfp
__setusermatherr
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 298KB - Virtual size: 595KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ