Static task
static1
Behavioral task
behavioral1
Sample
31e3a0ae2733f96ba934b7dfd.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
31e3a0ae2733f96ba934b7dfd.exe
Resource
win10v2004-20230703-en
General
-
Target
31e3a0ae2733f96ba934b7dfd.exe
-
Size
485KB
-
MD5
3c80395c2993e34cded92111448b4924
-
SHA1
aea10d8e6f6a3b4ea2b33fcd2503d02d8aa1cb91
-
SHA256
31e3a0ae2733f96ba934b7dfdf2d3d3d93ce614eb476d78f4e13bf81f7ce7083
-
SHA512
958f7be2a7a329a23cd5538fe245c72ecfa594f179a0f30ec454cbbeade968f7c6a02d10f28a5a1c3f9d13399593342086364abf520e4924ab41498b1479349c
-
SSDEEP
6144:jbpuPSVx1VHoIvvKMo/V/4DXyzXylrLnxO51M+4GW99y:3pNvVHDvvKMo/V/4DijULnmW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e3a0ae2733f96ba934b7dfd.exe
Files
-
31e3a0ae2733f96ba934b7dfd.exe.exe windows x64
32909006f62a64819fff6c2acf57cd47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ReadFile
GetModuleFileNameA
SetWaitableTimer
VirtualProtect
WriteFile
GetModuleHandleA
Sleep
CreateFileA
LoadLibraryA
CloseHandle
CreateWaitableTimerA
GetProcAddress
GetComputerNameW
GetCurrentProcess
GetLastError
WriteConsoleW
RaiseException
GetSystemInfo
VirtualQuery
FreeLibrary
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetFileType
MultiByteToWideChar
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
CreateFileW
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 357KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ