Static task
static1
Behavioral task
behavioral1
Sample
599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3.exe
Resource
win10v2004-20230915-en
General
-
Target
599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3
-
Size
11.1MB
-
MD5
acd40b93d9955b06d3a315075c3f2abe
-
SHA1
d25950b8621d714e6c85d1b15c60bd64d792af53
-
SHA256
599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3
-
SHA512
81c987a124f5b338372ecbc1fd4e56ed0e0190ce87475b2d838f4db2da2a814201a56f132167e88fcc4987495ced49da03ad3d0697352757d2664e21ec1dacd4
-
SSDEEP
1536:mFC2baZ92qjt4UZ8p9hvclNyN65T9DNVsr7EKAFZw/St0YlH3hfdGyCSFCWoWoWT:qA19Z8p99kNyN6xVw7EZZw6i0H3dnCS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3
Files
-
599954aea4fe95dadf71cf051a2eacb92bd156bbaa87a06e4d0e5f2b3584ede3.exe windows x86
9129c94053af68623e557706ebae1dfa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
authz
AuthzInitializeContextFromSid
AuthzAddSidsToContext
kernel32
OpenSemaphoreW
GetVolumeNameForVolumeMountPointW
InterlockedIncrement
WriteConsoleA
LoadLibraryExA
ReadFile
QueryDosDeviceW
CreateMailslotW
GetCurrentDirectoryW
VirtualQueryEx
CreateJobObjectA
FindResourceW
LoadLibraryA
SetCurrentDirectoryW
VirtualProtect
VirtualAlloc
DeleteFileW
FindAtomA
FindClose
WaitForSingleObject
DeleteFileA
FreeConsole
GetCurrentThread
TlsGetValue
OpenFileMappingA
certcli
CAEnumFirstCA
CACloseCA
CAEnumNextCA
cmutil
CmMalloc
CmRealloc
CmFree
CmMoveMemory
user32
PeekMessageW
FindWindowA
GetPropA
DrawStateW
GetClassLongA
DialogBoxParamW
LoadCursorW
LoadMenuA
CreateWindowExA
IsCharLowerA
InsertMenuA
PostMessageA
CharToOemA
LoadBitmapA
GetMessageW
advapi32
RegOpenKeyW
InitializeSid
RegLoadKeyA
CryptSignHashA
RegCreateKeyExW
RegDeleteValueA
RegRestoreKeyA
RegSaveKeyA
RegUnLoadKeyW
GetUserNameW
RegCloseKey
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rlo� Size: 11.0MB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE