Static task
static1
Behavioral task
behavioral1
Sample
c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b.exe
Resource
win10v2004-20230915-en
General
-
Target
c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b
-
Size
96KB
-
MD5
cdea8000be9437ae95ea963d4252f1ad
-
SHA1
4ba37c640a7578f9cac0895d423081aa78481a23
-
SHA256
c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b
-
SHA512
2a0cf3a26f54009891b2fa5b9fec8f354c6e8bd1d80c81f335144f164d8c898dff0da801ee25b8d3df1ae1fff4b3454a0c792c98f1be9dac9741866ed7fc3c61
-
SSDEEP
1536:vEEQyLv6lSjZqZ3FYxShtkr8avGYemEh0RddsRWrl1gFGiaxun:vEEDvWStqZ3awa8aPEqHd+1Taxun
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b
Files
-
c9960f31a4c3b2f4fa35077b96a494ea91294e354cf6ff155aed5b0beb66801b.exe windows:5 windows x86
e712a62eb8921b8fcfda465791d0f0c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
km-106driverutildll
_getMonitors@4
_SpoolServiceIsStar@0
_enumPrinterPorts@4
_ReleasePortInfo@4
_getOsName@4
_isCOM@4
_configCOM@20
_isLPT@4
_configLPT@12
_setRegStr@12
_uninstall@0
_DriverIsInstalled@4
_restartSpooler@0
_WriteLog@8
_KM106UninstallDriver@4
_KM106InstallDriver@4
kernel32
IsValidCodePage
LCMapStringW
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
HeapAlloc
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenW
GetProcAddress
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
LoadLibraryW
Sleep
CloseHandle
GetOEMCP
GetSystemDefaultLangID
WideCharToMultiByte
GetProcessHeap
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ExitProcess
HeapCreate
HeapSize
HeapReAlloc
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
SetThreadPriority
GetCommandLineW
CreateThread
ExitThread
EncodePointer
DecodePointer
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
GetACP
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
user32
GetSystemMetrics
LoadImageW
GetDlgItemInt
SetDlgItemInt
SetForegroundWindow
SendDlgItemMessageW
GetWindowTextW
GetActiveWindow
DialogBoxParamW
CreateDialogParamW
PostQuitMessage
EnableWindow
IsDialogMessageW
DestroyWindow
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
EndDialog
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
SetTimer
GetWindowLongW
MessageBoxW
SendMessageW
GetDlgItem
SetDlgItemTextW
SetWindowTextW
SetWindowLongW
DefWindowProcW
UnregisterClassA
winspool.drv
AddPortW
advapi32
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyExW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoCreateInstance
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ