Static task
static1
Behavioral task
behavioral1
Sample
8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2.exe
Resource
win10v2004-20230915-en
General
-
Target
8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2
-
Size
677KB
-
MD5
cc4a78b74a85c5dda016572fb15c6620
-
SHA1
12ad75df5188a09a6cced31698b224048f15e7e3
-
SHA256
8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2
-
SHA512
f5c6cf5d09152c316d67d5a13a50e6fe8d58c880d70080fb3b45f8c0153d4f99a3901ffcecc5796ad0aa9330f12a447f10311317cafcfbb8e41da3f2a59c0af0
-
SSDEEP
6144:OIIIITwU+7VmxhaZhwl0OwGnJhGd/lI7+bwJTz1+k:HU+chn0OwGnJhgNwJTz1+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2
Files
-
8651d36eb26f3c9a7f49668a17cf19e6737e90847c8e1a9e232585ea71d2c3e2.exe windows:5 windows x86
2fe1c5339fb528c888d128c2fb691424
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
FreeLibrary
HeapFree
OpenProcess
GetLastError
HeapAlloc
LocalFree
GetProcessHeap
WaitForMultipleObjects
Sleep
CreateFileW
VirtualQuery
GetWindowsDirectoryW
CreateThread
GetEnvironmentVariableW
GetModuleFileNameW
GetCurrentProcessId
CloseHandle
CreateSemaphoreW
LoadLibraryW
TerminateThread
GetProcessId
InterlockedDecrement
ReleaseSemaphore
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocalTime
InterlockedIncrement
CreateDirectoryW
GetCurrentThreadId
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
InterlockedExchangeAdd
lstrlenW
GetFullPathNameW
GetCurrentProcess
FindClose
VirtualQueryEx
GetFileSize
SetFilePointer
WriteFile
ReadFile
OpenMutexW
ReleaseMutex
CreateMutexW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ResetEvent
SetEvent
CreateEventW
OpenEventW
WaitForSingleObject
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetFileAttributesW
GetFileAttributesExW
FindFirstFileW
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW
FindResourceW
LoadResource
LockResource
GetVersionExW
advapi32
EqualSid
AllocateAndInitializeSid
OpenProcessToken
FreeSid
GetTokenInformation
msvcp140
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
shlwapi
PathFileExistsW
vcruntime140
__std_exception_copy
__std_exception_destroy
_set_purecall_handler
_except_handler4_common
memset
memmove
memcpy
_CxxThrowException
wcsrchr
__std_terminate
__CxxFrameHandler3
_purecall
strstr
wcschr
api-ms-win-crt-runtime-l1-1-0
_errno
_set_invalid_parameter_handler
_controlfp_s
terminate
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
free
_callnewh
api-ms-win-crt-string-l1-1-0
towupper
wcscpy_s
_stricmp
towlower
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__acrt_iob_func
_set_fmode
__stdio_common_vswprintf
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
api-ms-win-crt-convert-l1-1-0
atoi
_itow_s
api-ms-win-crt-math-l1-1-0
_except1
_dtest
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE