Static task
static1
Behavioral task
behavioral1
Sample
03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab.exe
Resource
win10v2004-20230915-en
General
-
Target
03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab
-
Size
966KB
-
MD5
29e41326d2c2d1c83ba07184522f2d00
-
SHA1
8c33cdfc802393b4090af483471d387b46f1ee5a
-
SHA256
03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab
-
SHA512
15eb20a7b63f8ea422a1c80dae92daaa61fe3343426cd154447d98b380d4b3fa24feb5ee32a92055a7c36f2896032594ee426f7d9e3df4f7d677b35a1310ee12
-
SSDEEP
24576:wHbKZj3kE+4sLrJTKbaBRzoEuIi6NvbyoSCvcJU:wHWZj3kE+4HGHzoEuIi6Nvby9CkJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab
Files
-
03f5f098cf4fb2c55523996e7e51035ecf3e899bfdb74fa0eecd3ff2fd55a8ab.exe windows:6 windows x64
37af702961d43f2129e83d925af452dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
memmove
strcmp
wcslen
memcmp
memset
strncmp
strlen
strcpy
strcat
strstr
strrchr
__chkstk
memcpy
kernel32
GetCurrentThread
GetPriorityClass
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
GetCurrentProcessId
GetTickCount64
GetCurrentThreadId
Sleep
GetLastError
gdi32
CreatePen
GetDIBits
GetDeviceCaps
TextOutW
MoveToEx
SetTextColor
StretchDIBits
SetBkMode
SetBkColor
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
Sections
.text Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ