Static task
static1
Behavioral task
behavioral1
Sample
9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00.exe
Resource
win10v2004-20230915-en
General
-
Target
9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00
-
Size
1.6MB
-
MD5
26fe2d043d8e50abdd3abd87be0fad25
-
SHA1
24bf0f74fd2d2296bee8b5e0ef1933443511b774
-
SHA256
9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00
-
SHA512
057362e497d725cc8f444d6bf5433bde6055abaae37a7ca4812d343849d35ba8d934892210794a6c82e266ecb027eee7419670be2a80d34ae369dd0a7d329ab3
-
SSDEEP
12288:JdsJu0mzw3Hm3H8YWL9yf8BkbDbJStKxNN2Iv03hxSSSOh60pBEK/3X:vWR3G3cYP8BkbJo73h6UBEK/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00
Files
-
9398e3597391a963bccebb37e1c340897bb3fb63dc2a963dbeff8ee32e692d00.exe windows:4 windows x64
c310538f5c256ff9cbff9a391a724ecf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ws2_32
WSAGetOverlappedResult
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
ntdll
NtWaitForSingleObject
kernel32
VirtualAlloc
VirtualFree
GetQueuedCompletionStatus
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
LoadLibraryA
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetProcessPriorityBoost
SetThreadPriority
SetWaitableTimer
SuspendThread
WaitForSingleObject
WriteFile
winmm
timeBeginPeriod
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ