Static task
static1
Behavioral task
behavioral1
Sample
982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e.exe
Resource
win10v2004-20230703-en
General
-
Target
982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e
-
Size
149KB
-
MD5
d26046f60a6761faaf96d07ebc50b9ed
-
SHA1
f981bbb189e9805e2ed1f8fd60bc55575886b4bf
-
SHA256
982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e
-
SHA512
4c92a017cab426fa688014a9fd0d464e442668e1abc0a7572d68d979e4b6a145991bfb4fb97f1abef0ad431cf7c992cb49bb6576dafbefeab121081cbcb3307a
-
SSDEEP
3072:hT2uEpctvRUbiTbyvDMLc+yi6WAg0Fu3xaqtewIV/U/:h/EKhR0KybMLckAO8KewgU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e
Files
-
982a51de3dbbcb97f1c95e932c0f49bdc01c6625f437f3d094c39d96cd9bc79e.exe windows x86
fb679c56b10be3cd42978f143180b67f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsDebuggerPresent
WriteConsoleW
SetStdHandle
InitializeSListHead
GetThreadTimes
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
FreeEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetStdHandle
GetProcessHeap
GetOEMCP
IsValidCodePage
HeapSize
GetModuleHandleExW
LCMapStringW
CompareStringW
SetEvent
GetCPInfo
LoadLibraryExW
GetStartupInfoW
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTimeZoneInformation
IsProcessorFeaturePresent
HeapReAlloc
GetCommandLineW
HeapAlloc
HeapFree
RtlUnwind
RaiseException
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetFileType
GetCurrentProcess
CreateFileW
WriteFile
ExitProcess
GetACP
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetCurrentThread
InitializeCriticalSection
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
TerminateProcess
GetLastError
CloseHandle
GetEnvironmentStringsW
SetEnvironmentVariableA
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ