Static task
static1
Behavioral task
behavioral1
Sample
V2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
V2.exe
Resource
win10v2004-20230703-en
General
-
Target
V2.exe
-
Size
690KB
-
MD5
f3621a25987529358f649bccce5c42d9
-
SHA1
988a21fdf338d8e1231134a8d5806f98a899e2d1
-
SHA256
f955b0f0937f91a2954fa2aca5ec99d08e43330d0b4e854339300ec10d5fe92f
-
SHA512
d7f49c7e6055c25e06836f4bd3fbddc55b03af2c948ed95360a99ecf93ff98cee4800668c75c84c340f09b4b868723d131a9acd118520a6025e031a95faa2685
-
SSDEEP
6144:4Ngy2bRHGeBBNP3mGKJi7Xja/qrpqaald:4NgbBNf3mGKJi7Xja/q5ald
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource V2.exe
Files
-
V2.exe.exe windows x86
867e84b0e2096cd6743f6634440f7bb1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
VirtualAlloc
VirtualProtect
FreeConsole
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetTempFileNameW
WaitForSingleObject
GetProcessHeap
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SystemTimeToFileTime
CompareFileTime
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
ApplicationRecoveryFinished
Sleep
ApplicationRecoveryInProgress
CompareStringW
lstrcmpiW
GetPrivateProfileStringW
WritePrivateProfileStringW
InterlockedIncrement
GetDateFormatW
GetLocaleInfoW
GlobalSize
GlobalLock
GlobalUnlock
GlobalAlloc
lstrcmpW
ResetEvent
CreateEventW
GetConsoleCP
CreateThread
CloseHandle
SetEvent
GetSystemTime
GetModuleHandleW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
EnterCriticalSection
GetStartupInfoA
LeaveCriticalSection
SetUnhandledExceptionFilter
OutputDebugStringA
FlushFileBuffers
FindClose
GetStringTypeW
GetFileType
LCMapStringW
HeapAlloc
HeapFree
GetACP
GetCommandLineW
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
DecodePointer
user32
MessageBoxA
UnregisterClassA
LoadImageW
GetWindowPlacement
ShowWindow
GetSysColor
SetClassLongW
GetClassLongW
DrawMenuBar
SetMenuItemInfoW
AppendMenuW
RemoveMenu
GetSubMenu
EmptyClipboard
TranslateAcceleratorW
GetMessageW
SetForegroundWindow
CopyRect
IntersectRect
GetClientRect
gdi32
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreateCompatibleBitmap
ExtCreatePen
MoveToEx
LineTo
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW
CreateSolidBrush
GetRgnBox
GetDeviceCaps
CreateCompatibleDC
CreateFontIndirectW
GetTextExtentPointW
DeleteDC
DeleteObject
CreateDIBSection
EqualRgn
SelectObject
advapi32
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW
RegEnumValueW
RegGetValueW
RegQueryInfoKeyW
RegEnumKeyExW
comctl32
ImageList_LoadImageW
gdiplus
GdipCloneBrush
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipSetPageUnit
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipDeletePen
GdipCreatePen1
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipSetSmoothingMode
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateFromHDC
version
VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
winmm
timeGetTime
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 433KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ