Static task
static1
Behavioral task
behavioral1
Sample
028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c.exe
Resource
win10v2004-20230703-en
General
-
Target
028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c
-
Size
1.1MB
-
MD5
8cb5db6d05112527ad6ad3d94d52ec25
-
SHA1
a43beb35fdeaa48780efb0482316ffaeff03a3d9
-
SHA256
028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c
-
SHA512
33c5c7334b391fb1ada9dc7c24b0609565e07bfbef014ed57b6f2d6d1b001da059157375d3520d08e90b588c18a7c9c079e77a0ff8f8bb290b80a20105cc935b
-
SSDEEP
24576:9A4ILfZgD9Y4fDGgBZHFTwLa3mjQx6uFjIy94Unj:9A9LQG4bGyl0+3oQKUn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c
Files
-
028f4cb47fc9c0b9ca84c542562e34040f58cbe7f9893c077ade6cc8d0ce355c.exe windows x64
77bee3e1c5d63cdeb1e2a33a7b4a427f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
MessageBoxA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
comctl32
ord17
kernel32
GetLastError
GetProcAddress
SearchPathA
VirtualAlloc
VirtualFree
GetModuleFileNameA
LoadLibraryA
FormatMessageA
GetUserDefaultLCID
ExpandEnvironmentStringsA
FreeLibrary
GetFileAttributesA
LoadLibraryExA
GetPrivateProfileStringA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetLastError
GetCurrentThreadId
MultiByteToWideChar
GetACP
HeapAlloc
HeapFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LoadLibraryExW
LCMapStringW
RaiseException
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
ExitProcess
GetModuleHandleExW
GetProcessHeap
WideCharToMultiByte
HeapSize
HeapReAlloc
RtlUnwindEx
CreateFileW
WriteConsoleW
SetFilePointerEx
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
GetStdHandle
WriteFile
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1008KB - Virtual size: 1007KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ