Static task
static1
Behavioral task
behavioral1
Sample
b19057bcdcaad1exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
b19057bcdcaad1exeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
b19057bcdcaad1exeexeexeex.exe
-
Size
28.5MB
-
MD5
b19057bcdcaad142bf792c87f3e194fd
-
SHA1
d912d650820d91e4ccfbaf481caa95264a1ee5a3
-
SHA256
096baf1ca1d96016ca37ed19124687b8b484dee97dbaa50596610cfc90e03b7a
-
SHA512
d07755c3ff6c29c9157665338f7e54896e119b668f388259ed1898bd71cf7eb34e3a48e0ce048b88b9d51539a150d8badee33eef39b103c90bff1da5598523dd
-
SSDEEP
393216:6IkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkJHJIkD:y999999999999999999999999999
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b19057bcdcaad1exeexeexeex.exe
Files
-
b19057bcdcaad1exeexeexeex.exe.exe windows x86
23281bc54b6eb33a050c2a6b859e0a5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateProcessW
GetTempFileNameW
GetWindowsDirectoryW
CreateDirectoryW
RemoveDirectoryW
SetEvent
ReadFile
CreateThread
WaitForSingleObject
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetFileSize
CreateFileW
ExpandEnvironmentStringsW
DeleteFileW
Sleep
SetCurrentDirectoryW
GetModuleFileNameW
CreateEventW
SetUnhandledExceptionFilter
SetEndOfFile
SetStdHandle
WriteConsoleW
LoadLibraryW
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
SetFilePointer
GetConsoleMode
GetConsoleCP
HeapSize
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
RaiseException
GetModuleHandleW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
advapi32
RegisterServiceCtrlHandlerW
SetServiceStatus
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
StartServiceCtrlDispatcherW
shlwapi
UrlGetPartA
UrlGetPartW
PathAppendW
ws2_32
connect
socket
htons
getservbyname
inet_addr
htonl
closesocket
getservbyport
ntohs
gethostbyaddr
WSAGetLastError
inet_ntoa
WSASetLastError
WSAStartup
send
recv
shutdown
gethostbyname
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28.3MB - Virtual size: 28.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ