Static task
static1
Behavioral task
behavioral1
Sample
ea4d50c2d07be724dd8bf8f3df32a54e3a54097978bd484a1bda54a29ab1e6a0.exe
Resource
win10v2004-20230831-en
General
-
Target
ea4d50c2d07be724dd8bf8f3df32a54e3a54097978bd484a1bda54a29ab1e6a0
-
Size
324KB
-
MD5
f01ed07184ee3aa34898d3ceefc5c8d2
-
SHA1
606f6504536830dc15175f6391d80c7ac7ef89bb
-
SHA256
ea4d50c2d07be724dd8bf8f3df32a54e3a54097978bd484a1bda54a29ab1e6a0
-
SHA512
7a55bd4fa25d187c9810569b9e58cb0370a3690a168eec9bc294ae84470703cffb49c96728600ee17eadac4989d4011ff86fa35758af36fe22693532df04d388
-
SSDEEP
3072:8MoO7WsdNnduzeUcXWR+ZYwQoq6M4fNWxNvBjTG2/qY+ADoQwRQaxrJ9xGNm+s:t2ANBUcXWzw1qMgNBP/bWRXX9ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea4d50c2d07be724dd8bf8f3df32a54e3a54097978bd484a1bda54a29ab1e6a0
Files
-
ea4d50c2d07be724dd8bf8f3df32a54e3a54097978bd484a1bda54a29ab1e6a0.exe windows x86
e77054925f91bbb709fc17135ae0c093
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
GetProfileStringW
AddConsoleAliasW
SetVolumeMountPointW
OpenSemaphoreA
GetSystemDefaultLCID
BackupSeek
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
EnumTimeFormatsW
GetCommandLineA
TzSpecificLocalTimeToSystemTime
GetDriveTypeA
GetEnvironmentStrings
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetCalendarInfoW
SetVolumeMountPointA
SetConsoleCP
TerminateProcess
GetSystemDirectoryA
GetStartupInfoW
RaiseException
CreateJobObjectA
GetConsoleAliasExesA
InterlockedExchange
GetLastError
GetCurrentDirectoryW
PeekConsoleInputW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GetNumaHighestNodeNumber
LoadLibraryA
OpenMutexA
GetProcessId
LocalAlloc
GetFileType
MoveFileA
BuildCommDCBAndTimeoutsW
AddVectoredExceptionHandler
GetNumberFormatW
AddAtomW
FindNextFileA
GlobalUnWire
GetModuleHandleA
EnumResourceNamesA
FindNextFileW
GetStringTypeW
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
FindAtomW
FindFirstVolumeW
FindFirstFileW
SetDefaultCommConfigA
GetCommandLineW
GetComputerNameA
GetPrivateProfileIntW
GetVolumeNameForVolumeMountPointA
ReadFile
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcAddress
ExitProcess
DeleteFileA
HeapSetInformation
GetCPInfo
RtlUnwind
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW
gdi32
GetCharABCWidthsW
GetTextFaceW
SelectPalette
advapi32
LookupAccountSidW
ole32
CoGetInstanceFromFile
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ