Static task
static1
Behavioral task
behavioral1
Sample
77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3.exe
Resource
win10v2004-20230703-en
General
-
Target
77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3
-
Size
481KB
-
MD5
1dd482a516c72b20159cfde8fbd9bcfd
-
SHA1
8c6e29fbfd5a14a930154c34737f04facbc214fd
-
SHA256
77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3
-
SHA512
710fdea6f77efdf4143372a4e5fcffb54f8dfe6d578144487539abb63d1cb051683426e63fdc91a95e4f2390c1940e8ffafa40c259212aac80947002944af596
-
SSDEEP
6144:qpgrpKTIix/N5O8ML4p2Ie2EzmgCbDhCMsI63AxJBcDsaQfrzaRW:d3MV3ML4ple2OCbXsI6wfBcsaLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3
Files
-
77baec5c62751ead6038d0af6662c4eb9cf64254272ac441de09a5221f414ec3.exe windows x86
75b648a46b733c8e58adc6778202990d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateFileW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapQueryInformation
HeapSize
HeapReAlloc
GetStringTypeW
LCMapStringW
VirtualQuery
GetProcessHeap
HeapAlloc
HeapFree
OutputDebugStringW
WriteConsoleW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetFileAttributesA
DecodePointer
GetModuleHandleW
ExitProcess
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
GetStdHandle
HeapValidate
IsBadReadPtr
InitializeCriticalSectionAndSpinCount
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
GetLocaleInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
OutputDebugStringA
FlushFileBuffers
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.textbss Size: - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ