Static task
static1
Behavioral task
behavioral1
Sample
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5.exe
Resource
win10v2004-20230831-en
General
-
Target
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
-
Size
833KB
-
MD5
b7d6e0d4e7c4103645cb79133537e737
-
SHA1
411f5be09a1ecce1ebb26ff639f79d55f190f1eb
-
SHA256
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
-
SHA512
1c0c260642a445c3549ab6f1f072e0a5ef3ad9afa5c543b7c76b87cee940973573ace561d9e9fae82440dc1d0309f0d3d9890be357dff7aca6182ad687f5b08f
-
SSDEEP
12288:WPXO8AW1c6UmYnp/vLHSzs5RIYfmb9elhuwNqMAiR8xX:WvOU1c7np/vLHCs5RIY09el8wNbp4X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5
Files
-
ab27cd1f7b8146210ab69d0d011463e9a9d7d2ee40930452744a882b1b9b13c5.exe windows x86
e77054925f91bbb709fc17135ae0c093
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
GetProfileStringW
AddConsoleAliasW
SetVolumeMountPointW
OpenSemaphoreA
GetSystemDefaultLCID
BackupSeek
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
EnumTimeFormatsW
GetCommandLineA
TzSpecificLocalTimeToSystemTime
GetDriveTypeA
GetEnvironmentStrings
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetCalendarInfoW
SetVolumeMountPointA
SetConsoleCP
TerminateProcess
GetSystemDirectoryA
GetStartupInfoW
RaiseException
CreateJobObjectA
GetConsoleAliasExesA
InterlockedExchange
GetLastError
GetCurrentDirectoryW
PeekConsoleInputW
RemoveDirectoryA
EnumSystemCodePagesW
GlobalGetAtomNameA
GetNumaHighestNodeNumber
LoadLibraryA
OpenMutexA
GetProcessId
LocalAlloc
GetFileType
MoveFileA
BuildCommDCBAndTimeoutsW
AddVectoredExceptionHandler
GetNumberFormatW
AddAtomW
FindNextFileA
GlobalUnWire
GetModuleHandleA
EnumResourceNamesA
FindNextFileW
GetStringTypeW
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
FindAtomW
FindFirstVolumeW
FindFirstFileW
SetDefaultCommConfigA
GetCommandLineW
GetComputerNameA
GetPrivateProfileIntW
GetVolumeNameForVolumeMountPointA
ReadFile
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcAddress
ExitProcess
DeleteFileA
HeapSetInformation
GetCPInfo
RtlUnwind
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW
gdi32
GetCharABCWidthsW
GetTextFaceW
SelectPalette
advapi32
LookupAccountSidW
ole32
CoGetInstanceFromFile
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 599KB - Virtual size: 31.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ