Static task
static1
Behavioral task
behavioral1
Sample
d408fe3421f520710e8a6ac6f0b9a1759b03ab3f44134e451d72af3bb79a3ad0.exe
Resource
win10v2004-20230703-en
General
-
Target
d408fe3421f520710e8a6ac6f0b9a1759b03ab3f44134e451d72af3bb79a3ad0
-
Size
1.0MB
-
MD5
a71fe2312ed184886e32a760d70a8768
-
SHA1
aae2e745a5fc88e313439f8ec7b4bcc740a5dc44
-
SHA256
d408fe3421f520710e8a6ac6f0b9a1759b03ab3f44134e451d72af3bb79a3ad0
-
SHA512
92ee6d1ba9b78b169e8411dbab70c8a3b7d2a7df82ff1f631d480e6d07cdecb2bd0f347c1d3a9e9bad1f3df6ecddefe73a3505bc5ed3b2bd36c194e3b9d6f3ab
-
SSDEEP
24576:sOSFVCYJfLLe4ZwvlWW8q9KWvqHvj76D7dTSJSfnSoCLp:sWYhjZc8SKWyHvn6D7ZOSfSoCLp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d408fe3421f520710e8a6ac6f0b9a1759b03ab3f44134e451d72af3bb79a3ad0
Files
-
d408fe3421f520710e8a6ac6f0b9a1759b03ab3f44134e451d72af3bb79a3ad0.exe windows x86
6ea63de885aa1ea835e6a814ea5962de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount64
VirtualAlloc
GetFileAttributesA
SetUnhandledExceptionFilter
QueryPerformanceCounter
LeaveCriticalSection
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
FlushInstructionCache
GetVersion
GetModuleHandleA
GetModuleHandleW
LoadResource
FindResourceW
GlobalAlloc
MulDiv
lstrcmpA
lstrlenA
CloseHandle
CreateFileW
CreateDirectoryA
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetFileType
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
LoadLibraryExA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
SleepEx
GetTickCount
FindNextFileA
FindFirstFileA
SetFilePointerEx
FindClose
GetCommandLineW
GetCPInfo
WriteConsoleW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
HeapAlloc
DecodePointer
HeapFree
user32
SendMessageA
DefWindowProcA
SystemParametersInfoW
GetWindow
GetDesktopWindow
EqualRect
IntersectRect
GetSysColor
ScreenToClient
GetWindowTextLengthW
RedrawWindow
GetDC
GetSystemMetrics
SetCapture
GetKeyState
GetFocus
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
OpenClipboard
GetDialogBaseUnits
GetDlgCtrlID
GetNextDlgTabItem
GetDlgItemTextW
UnregisterClassW
RegisterWindowMessageW
CreateDialogParamA
PostQuitMessage
gdi32
GetStockObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateDCW
SetWindowOrgEx
advapi32
RegEnumKeyA
RegCloseKey
RegOpenKeyA
ole32
OleInitialize
CoGetClassObject
shlwapi
PathFileExistsW
ord155
PathAppendA
PathFindOnPathA
Sections
.text Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 716KB - Virtual size: 718KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ