Static task
static1
Behavioral task
behavioral1
Sample
b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2.exe
Resource
win10v2004-20230915-en
General
-
Target
b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2
-
Size
618KB
-
MD5
d8dc24ca0d8ab5bc44c9b5560707b774
-
SHA1
018ae4646572e9a4d0ca5198a697b2fb1f737bfe
-
SHA256
b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2
-
SHA512
8e486e04a802cecffd89c99a93325b8901ab22a06f9b5404cbac767bb3ea4b0b085f0abd255e3e355e640d1a5f27f3aea61701159e38ff28ac050a148fdcb5cc
-
SSDEEP
12288:5+I3Prhj4xvqOVFk9D8UNviXhjo9+PXON0m3j8edtQC:5pDhExvhV6NkoW+vj8eduC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2
Files
-
b93781c4318efce8a2df108f05ea50bcc242345fdb35291ccfe468d6013bdba2.exe windows:6 windows x64
66da425f9ed09516cdb06bd04884a636
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetEnvironmentStringsW
SetEndOfFile
AllocConsole
GetConsoleWindow
FreeEnvironmentStringsW
SetEnvironmentVariableW
DeleteFileW
GetCommandLineW
GetCommandLineA
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileAttributesExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DuplicateHandle
CreateProcessW
HeapAlloc
HeapSize
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
OutputDebugStringW
WriteConsoleW
GetFileSizeEx
SetFilePointerEx
GetCurrentDirectoryW
GetFullPathNameW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
WaitForSingleObject
GetExitCodeProcess
CreatePipe
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
HeapReAlloc
HeapQueryInformation
GetProcessHeap
ReadFile
ReadConsoleW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
RtlUnwind
user32
ShowWindow
MessageBoxW
advapi32
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCloseKey
shell32
SHGetKnownFolderPath
SHGetSpecialFolderPathW
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ