Static task
static1
General
-
Target
9wu0xsndycv6uqky.exe
-
Size
14.3MB
-
MD5
f69531ad75aed94b7174fbe681bcf6da
-
SHA1
cc88a57ef4e478bab6f5d2d77c7783fcc775d862
-
SHA256
13b69053acf47e9e4f4ee9b74e58cec8076b3b69220ce1b5b398be66de08e976
-
SHA512
c2f70d9c021b1084e020b3beddecde173f571fe9d6a56e66ff2db6c752508fd32da2e1521267700a46c192b76f98b9b97e16c49ccf0fe4b8e1ee4ee586f33955
-
SSDEEP
393216:nUKZw1CqEDs+PkE156WQWLSB+gRcsLPEivQmM:Tj4+cEtQWOpTvQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9wu0xsndycv6uqky.exe
Files
-
9wu0xsndycv6uqky.exe.exe windows:6 windows x64
444c974be180e5a014ac40402b6bd9fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
closesocket
opengl32
glBindTexture
kernel32
FreeLibrary
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetWindowLongPtrA
gdi32
DeleteObject
advapi32
CryptGenRandom
shell32
DragQueryPoint
imm32
ImmSetCompositionWindow
Sections
wP<Ng;J1 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
o.sH:?B6 Size: - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BGM0;dUp Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hDcDO'M_ Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
&OZybgG[ Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I9aDZYAk Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PF>Ynfme Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3k/q&>$? Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rtgl3dgD Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
nk@Jm_vo Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T$KTbRh^ Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ