Static task
static1
Behavioral task
behavioral1
Sample
executable.2024.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
executable.2024.exe
Resource
win10v2004-20230703-en
General
-
Target
executable.2024.exe
-
Size
223KB
-
MD5
6294e7dd34212d55c1b0ffbf13fcf91a
-
SHA1
8eef153573e00e1b8faa05a593a1df733f23b97f
-
SHA256
99747e6163d26aa3a211615ab288f8a32afd85233244fda482fe9672594e5d64
-
SHA512
efc46c92d070b42aaaab91ce65e07245d3e5782d6b57256a9141541f584d2aaf5b43c6b37d0725f581556a111e0f577251aa99044e0ce5b1f426991d1b6eac9b
-
SSDEEP
3072:K4OmZgi21psE33gnlAsvc6I1A3PD52lsDnAv8Zm++l2ve:mcspsWAU1Af0YnWem++l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource executable.2024.exe
Files
-
executable.2024.exe.exe windows x86
9748e23638d9a98f7546d68370188e03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hccutils
FindResources
LoadSTRINGFromHKCU
LoadSTRING
kernel32
GetModuleHandleA
CreateProcessA
FreeLibrary
LoadLibraryA
CloseHandle
GetLastError
InterlockedDecrement
SearchPathA
CompareFileTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrcmpiA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetWindowsDirectoryA
Sleep
CreateMutexA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoA
GetProcAddress
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStdHandle
WriteFile
HeapCreate
HeapReAlloc
ExitProcess
LCMapStringW
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
VirtualFree
SetUnhandledExceptionFilter
IsDebuggerPresent
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
RtlUnwind
user32
CharNextW
PostThreadMessageA
UnregisterClassA
wsprintfA
CharNextA
GetWindowLongA
GetCursorPos
EnumDisplayDevicesA
EnumDisplaySettingsA
CreateDialogParamA
CallWindowProcA
RegisterClassExA
UnregisterHotKey
RegisterHotKey
ActivateKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
GetKeyboardLayout
GetKeyboardLayoutList
LoadCursorA
GetClassInfoExA
SetWindowLongA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
SetTimer
IsWindow
SendMessageA
ShowWindow
PostQuitMessage
PeekMessageA
DefWindowProcA
KillTimer
DestroyWindow
GetDlgItem
GetDesktopWindow
GetWindowRect
SetWindowTextA
MessageBoxA
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
ole32
CoRevokeClassObject
CoCreateInstance
CoTaskMemRealloc
CoSuspendClassObjects
CoTaskMemAlloc
CoRegisterClassObject
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoInitialize
oleaut32
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
SysFreeString
VariantClear
LoadTypeLi
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE