Static task
static1
Behavioral task
behavioral1
Sample
28e6aaa2eaf47fexeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
28e6aaa2eaf47fexeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
28e6aaa2eaf47fexeexeexeex.exe
-
Size
2.2MB
-
MD5
28e6aaa2eaf47fd1a0e40207b2cee3fb
-
SHA1
695747f7cf3de01fb35458e00f1f8434abdb8c07
-
SHA256
06e98f4ff0a0d6e6044cbd511eb0dc788b997d0b1334c4a6e77fb4bbdf5e63f7
-
SHA512
74e2a424aab0e44690b2401ded27ecbfb0d9d99df24d78c4e73343a7ce347bc4a6a86b1c1a6489c9d1deb79adbbe53d0196a1c23756b81427f53f36cf8ae16e6
-
SSDEEP
49152:lr1dPUGDq0JouGHZVewh/4LrOKOSsDTXBtiCkXM5h8lKqNVEJJ:lQYiDzBzqK5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28e6aaa2eaf47fexeexeexeex.exe
Files
-
28e6aaa2eaf47fexeexeexeex.exe.exe windows x86
08325296d61ab007730e77d61d36ebbe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
lstrlenW
GetModuleHandleExW
lstrlenA
GetModuleHandleExA
GetLastError
GetProcAddress
GetModuleHandleW
CreateNamedPipeW
LoadLibraryW
IsProcessInJob
GetCurrentProcess
SetDllDirectoryW
IsDebuggerPresent
CreateMutexA
ReleaseMutex
TerminateProcess
SetErrorMode
GetCommandLineW
LocalFree
CreateEventA
CreateSemaphoreA
DuplicateHandle
ReleaseSemaphore
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
WaitForSingleObjectEx
VirtualProtect
EnterCriticalSection
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
SuspendThread
ResumeThread
Sleep
GetCurrentThread
GetThreadPriority
GetSystemInfo
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
VirtualQuery
OpenThread
InterlockedPopEntrySList
VirtualFree
GetVersionExW
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
RaiseException
FreeLibrary
LoadLibraryExA
GetFileAttributesW
K32GetModuleFileNameExW
OpenProcess
FormatMessageW
CreateEventW
ResetEvent
DeleteCriticalSection
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
GetModuleFileNameW
GetSystemTimeAsFileTime
GetProcessTimes
InitializeCriticalSectionEx
DecodePointer
CreateProcessW
GetCurrentDirectoryW
HeapDestroy
HeapReAlloc
HeapSize
WideCharToMultiByte
GetTempPathW
UnregisterWaitEx
RegisterWaitForSingleObject
GetExitCodeProcess
GetLocaleInfoW
CreateFileW
DeviceIoControl
LocalLock
LocalAlloc
MulDiv
LocalUnlock
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
TryEnterCriticalSection
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
QueryPerformanceFrequency
GetStringTypeW
GetExitCodeThread
GetNativeSystemInfo
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetCPInfo
CompareStringW
LCMapStringW
SetCurrentDirectoryW
DeleteFileW
GetFullPathNameW
RemoveDirectoryW
GetModuleHandleA
MoveFileExW
FormatMessageA
OpenEventA
WaitForMultipleObjectsEx
SetWaitableTimer
GetLogicalProcessorInformation
CreateWaitableTimerA
SystemTimeToFileTime
OutputDebugStringW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
ExitProcess
GetStdHandle
GetFileType
GetModuleFileNameA
WriteConsoleW
SetConsoleCtrlHandler
WriteFile
GetACP
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
ReadConsoleW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
QueryDepthSList
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 198KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE