Static task
static1
Behavioral task
behavioral1
Sample
111.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
111.exe
Resource
win10v2004-20230220-en
General
-
Target
111.exe_
-
Size
2.2MB
-
MD5
a0b232dadd23d02441c5ac230b74f46d
-
SHA1
acbfe0308f19e49d638bc15c9d76a41acfff2a8b
-
SHA256
b7e6c65a0c814e9655e3c7b90891dcf560f7214c39c737c8c5d94995ad64641f
-
SHA512
f81cb09f30c04838b83df34c9c3ee51c4a0c14662a248a829207a74ea66a1f3da9dbf2b865eaa664c3dfdc3513f062df2b5f1810fad040207e21e81c644e7e90
-
SSDEEP
24576:StOvoNuJ/mGhggDClEtXZZLcWOHMnNo4z7P45Iv+lSwK8UJx+eLZK:OOyuJ/moHhHYXsnC4z7A5I2cj8MxJLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 111.exe_
Files
-
111.exe_.exe windows x64
4501b5f6d2519a9cf66c779402957fa5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptSetKeyParam
CryptGetKeyParam
CryptDecrypt
user32
MessageBoxA
CharNextW
LoadStringW
TranslateMessage
MessageBoxW
LoadStringW
GetSystemMetrics
GetMessageW
GetCursorPos
DispatchMessageW
CharUpperW
CharLowerBuffW
kernel32
Sleep
VirtualFree
VirtualAlloc
GetLogicalProcessorInformation
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
lstrlenA
lstrcpyA
lstrcmpiA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
Sleep
SetEvent
ResetEvent
LocalFree
IsValidLocale
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetTickCount
GetThreadLocale
GetNativeSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
ExitProcess
EnumCalendarInfoW
CreateThread
CreateEventW
CompareStringW
CloseHandle
Sleep
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 937KB - Virtual size: 937KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 39KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 416B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ