Static task
static1
Behavioral task
behavioral1
Sample
b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931.exe
Resource
win10v2004-20230915-en
General
-
Target
b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931
-
Size
200KB
-
MD5
ca285935f1fe5bf5f275ffcb561c2d59
-
SHA1
96fbb240f5ccbefeb78c6c53e334c21d44f938e3
-
SHA256
b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931
-
SHA512
45e0fb3b3c3937e5be447094b102614d4f1d740ea24e25faf195280b5f98ccb89591574a6f6f176fbb7826dbd69b588778c6d8f05f88cf6cdb3e20e46f26b241
-
SSDEEP
3072:iYsuE2is/HYt+GEhqHyoWDv6pFMpyeV8hlL0dJnKTibZFtiaGQd2kegAF8eYG:ighHYtNBHWDv6pqy2qlLoJnyitdpeZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931
Files
-
b72fe3b6b67cc0e78d401185c4018b1162d0f7ccc2763d194396c7b50a7ba931.exe windows x86
9628ccd0befdb928f28c18f598706966
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
WaitForSingleObject
Sleep
SetEvent
CloseHandle
CreateEventA
GetCurrentThreadId
SetLastError
CancelIo
lstrlenW
CreateEventW
ResetEvent
WideCharToMultiByte
HeapReAlloc
WriteProcessMemory
ResumeThread
OpenProcess
GetFileAttributesA
GetSystemDirectoryA
GetThreadContext
VirtualAllocEx
CreateProcessA
SetThreadContext
GetExitCodeProcess
GetModuleFileNameA
GetCurrentDirectoryA
MoveFileExA
CreateThread
GetConsoleWindow
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetStdHandle
GetLastError
HeapSize
InitializeCriticalSectionEx
VirtualAlloc
VirtualFree
HeapFree
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
WriteConsoleW
LCMapStringW
CompareStringW
GetFileType
GetCommandLineW
IsDebuggerPresent
OutputDebugStringW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
user32
ShowWindow
GetInputState
PostThreadMessageA
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
ws2_32
WSAIoctl
closesocket
gethostbyname
select
send
socket
connect
recv
htons
setsockopt
WSAStartup
WSACleanup
winmm
timeGetTime
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ