Static task
static1
Behavioral task
behavioral1
Sample
49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993.exe
Resource
win10v2004-20230915-en
General
-
Target
49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993
-
Size
202KB
-
MD5
1b724e340ee53cd445b6c60911991692
-
SHA1
6c9011fb25abd367653f9cb0db78e35d49f462d2
-
SHA256
49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993
-
SHA512
02102e81a91046ca72b68aab8bd25fade76cfd959ba8ab4437f78efedfcddf8ddd2fe609326f5c83692423740718425a83359851b4674a495ada96bcd4a8dbec
-
SSDEEP
3072:LRXWIaJCzr3cbrummBdt/YQEPnW7fL5uhwe2:BZaQ3BmYaoch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993
Files
-
49982383c33b6e66bfd98ce748423b0d893013eee21d2124610073fd674a3993.exe windows:5 windows x86
8a5878408e89d1fd5731f7a33cc8a29b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameW
EnumResourceNamesW
SetFilePointer
PeekNamedPipe
SetConsoleTextAttribute
OpenJobObjectA
GlobalLock
WriteConsoleInputA
CreateHardLinkA
FreeEnvironmentStringsA
GetTickCount
GetDateFormatA
LoadLibraryW
SizeofResource
GetFileAttributesA
FileTimeToSystemTime
GetGeoInfoA
CreateFileW
SetThreadPriority
GetLogicalDriveStringsA
GetLastError
GetThreadContext
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
BackupWrite
InterlockedExchangeAdd
CreateHardLinkW
FoldStringW
GetModuleFileNameA
FindNextFileA
FindFirstChangeNotificationA
GetShortPathNameW
OpenSemaphoreW
FindFirstVolumeW
GetConsoleProcessList
FindNextVolumeA
HeapSize
ReadConsoleOutputCharacterA
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
RtlUnwind
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileA
SetStdHandle
GetModuleHandleA
GetConsoleCP
GetConsoleMode
LoadLibraryA
RaiseException
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetClassInfoExA
GetMessageExtraInfo
LoadMenuA
CharToOemBuffA
advapi32
InitiateSystemShutdownA
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ