Static task
static1
Behavioral task
behavioral1
Sample
89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9.exe
Resource
win10v2004-20230915-en
General
-
Target
89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9
-
Size
826KB
-
MD5
b8092c2cbbbbdbf85c2e49735ac9229e
-
SHA1
2d9a8ecef6729ada86c415b30a8b46548ffc8d71
-
SHA256
89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9
-
SHA512
648b31b5fd5f0b529f0c36354aa332ec09d5d2f1e6d9586ef6c0f709cf8d513ea790fe85a6fcc97be383c538fc127742b0583f76e81b64c64ccd6d4021846533
-
SSDEEP
12288:Q+hepE8QEC63iBTBtdbiPfK/Mh3YLWgRkqkGKjwCv4UP5WA3C:QYe3e65YLWO0Pjhv4SNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9
Files
-
89d7960ee49b46e62cfeedab2e0aabbb8bf67b4b6c857c3ffd8730e7d19a08c9.exe windows:5 windows x86
ca5e654936223dcb46b3d455ca72de41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
MoveFileExW
InterlockedDecrement
GetCurrentProcess
GetEnvironmentStringsW
SetHandleInformation
GetProfileStringW
SetVolumeMountPointW
GetComputerNameW
OpenSemaphoreA
GetSystemDefaultLCID
BackupSeek
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
GetConsoleAliasExesW
EnumTimeFormatsA
EnumTimeFormatsW
TzSpecificLocalTimeToSystemTime
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetCalendarInfoW
SetVolumeMountPointA
SetConsoleCP
GetExitCodeProcess
EnumSystemCodePagesA
TerminateProcess
GetSystemDirectoryA
GetStartupInfoW
RaiseException
GetDriveTypeW
GetPrivateProfileIntW
InterlockedExchange
GetLastError
GetCurrentDirectoryW
PeekConsoleInputW
RemoveDirectoryA
GlobalGetAtomNameA
GetNumaHighestNodeNumber
OpenMutexA
GetProcessId
LocalAlloc
MoveFileA
BuildCommDCBAndTimeoutsW
GetNumberFormatW
AddAtomW
FindNextFileA
GlobalUnWire
GetModuleHandleA
SetLocaleInfoW
EnumResourceNamesA
CreateMailslotA
GetStringTypeW
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
FindFirstVolumeA
FindAtomW
FindFirstVolumeW
DeleteFileW
AddConsoleAliasA
FindFirstFileW
SetDefaultCommConfigA
GetCommandLineW
GetFileSize
CreateJobObjectA
GetVolumeNameForVolumeMountPointA
InterlockedIncrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcAddress
ExitProcess
DeleteFileA
HeapSetInformation
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
CloseHandle
FreeEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
WriteConsoleW
ReadFile
CreateFileW
gdi32
GetCharABCWidthsW
GetTextFaceW
SelectPalette
advapi32
LookupAccountSidW
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 599KB - Virtual size: 31.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ