Static task
static1
Behavioral task
behavioral1
Sample
84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11.exe
Resource
win10v2004-20230703-en
General
-
Target
84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11
-
Size
1.2MB
-
MD5
489d3eb55c0d29c8515550d3a0276fb0
-
SHA1
f4b25f271eb615e5ad2104e71f7cb7466fa86650
-
SHA256
84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11
-
SHA512
cb88d31503b5cdb0013597fef72e671c6dca5f67bd5a53b7bb289c397413b1890c111db822667086a2d0a9c448846dc87d50680388f1bc4a4abec1eadf32452a
-
SSDEEP
12288:V1zO7bsk22wWuAn30pO2vB0gsSYKlQlxuNor/a/GFTgqdpQbahVE4Gy8YI:V1zESNi30pO2vB0gsSfs4ogq5hVr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11
Files
-
84d2c8e6db93c24f62f130f5005ce911bfc3c06ae4347269d12d30f86c107e11.exe windows x64
cb7f51d8c5b4cd87ae4829ead908e20d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FindNextFileW
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
FindClose
MultiByteToWideChar
GetLastError
GlobalFlags
CloseHandle
GetSystemInfo
GetCurrentProcessId
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
VirtualQuery
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
CreateEventW
SetEvent
ResetEvent
GetSystemTimeAsFileTime
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
SetFilePointerEx
WriteFile
GetStdHandle
GetCommandLineA
GetModuleHandleExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlPcToFileHeader
ReadFile
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
GetTickCount
ExitProcess
DeleteCriticalSection
FindResourceW
LoadResource
LockResource
Sleep
FreeResource
GetCurrentThreadId
InitializeCriticalSection
SizeofResource
GetCommandLineW
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
RtlUnwindEx
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
user32
LoadCursorW
LoadIconW
LoadStringW
GetWindowLongPtrW
SendMessageW
GetParent
LoadImageW
MessageBoxW
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseDC
GetDesktopWindow
WaitForInputIdle
GetWindowThreadProcessId
MonitorFromWindow
EnumWindows
GetDC
gdi32
SelectObject
SetDIBColorTable
CreateCompatibleDC
GetDeviceCaps
DeleteDC
GetObjectW
DeleteObject
CreateDIBSection
shell32
SHGetSpecialFolderPathW
ole32
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
gdiplus
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
ws2_32
WSACleanup
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1017KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ