Static task
static1
Behavioral task
behavioral1
Sample
49ee8deeb69f94cd14a9e69fc1490b81.exe
Resource
win7-20230621-en
General
-
Target
49ee8deeb69f94cd14a9e69fc1490b81
-
Size
380KB
-
MD5
49ee8deeb69f94cd14a9e69fc1490b81
-
SHA1
40adc0ebaf2137c67392cccb2210c12c2ec24767
-
SHA256
97b2cf87489857dd47af7dbda3da5edd6e9ddc0c5cecbed9b74105a46cebe7e1
-
SHA512
21078d70d85a45ad8dfe1220ace9957c64cd9f51dcc51f889d8ecfe21c0d4de6b558c592bc527a23dd3791c54e6c7412c0a557c2045b9f8433d21e2dc11b764c
-
SSDEEP
6144:us1xjhqbqZlwXv/JdHwBU+EXvB385URXwZH83WxiAG:uW9qbqZcXJL3XN82RXj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ee8deeb69f94cd14a9e69fc1490b81
Files
-
49ee8deeb69f94cd14a9e69fc1490b81.exe windows x86
735a07b48377a1865081819d76cd8354
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
ConvertThreadToFiber
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
InterlockedDecrement
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetCurrentThread
GetWindowsDirectoryA
WaitNamedPipeW
EnumTimeFormatsA
GetCommandLineA
GetPriorityClass
GetVolumePathNameW
GlobalAlloc
SetFileShortNameW
GetCalendarInfoA
LeaveCriticalSection
CreateSemaphoreA
GetFileAttributesW
WriteConsoleW
GetCompressedFileSizeA
GetVolumePathNameA
CreateMailslotW
InterlockedExchange
GetCPInfoExW
GetCurrentDirectoryW
SetLastError
GetProcAddress
GetConsoleAliasesLengthW
GlobalGetAtomNameA
SearchPathA
GlobalFree
GetTempFileNameA
OpenWaitableTimerA
LoadLibraryA
OpenThread
SetCalendarInfoW
MoveFileA
GetNumberFormatW
BeginUpdateResourceA
VirtualLock
AddAtomA
HeapWalk
OpenJobObjectW
GetPrivateProfileSectionNamesA
FindNextFileA
EnumDateFormatsA
GetModuleHandleA
GetStringTypeW
GetCurrentDirectoryA
CompareStringA
GetShortPathNameW
GetCPInfoExA
GetVolumeNameForVolumeMountPointW
GetFileInformationByHandle
DebugBreak
ReadConsoleOutputCharacterW
OpenFileMappingA
LocalFileTimeToFileTime
CloseHandle
CreateFileW
MoveFileW
CreateMutexW
GetLastError
WideCharToMultiByte
MultiByteToWideChar
HeapReAlloc
HeapSetInformation
GetStartupInfoW
RaiseException
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
SetFilePointer
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
LCMapStringW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
LoadLibraryW
ReadFile
user32
GetAltTabInfoW
advapi32
ReadEventLogW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dozig Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ