Static task
static1
Behavioral task
behavioral1
Sample
406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97.exe
Resource
win10v2004-20230915-en
General
-
Target
406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97
-
Size
432KB
-
MD5
ba1771238a6cc4edc3cd943e84188dd3
-
SHA1
04e2075f7ca1ac1f293baa4ce93965b14791e7f1
-
SHA256
406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97
-
SHA512
b51a610a98c3957c2534c9f7ab5d7bbeb52f8bb1b11490e6eef3ed8b9667ad408e5da93b2558867e0a8cfa9b701c26786fe746caf2789de7105479683938e463
-
SSDEEP
12288:xAM2yHIZ5Uquzwi0bj3yJ7GvMl7iFJUfEFVwHn84DOy//7:qPZ5/uzwi0bjc7Gv1zUfkVwHn84Kyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97
Files
-
406aeeef075a3e613ff121ee3dba5d8ef04804906c821a738ab9d09fc7b7dd97.exe windows:4 windows x86
ff160957d16df3dba33bb98b0c70170a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetMalloc
kernel32
FlushFileBuffers
CreateFileA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
WaitForSingleObject
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetCommandLineW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FormatMessageW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
ResumeThread
WaitForMultipleObjects
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
SetFileAttributesW
GetTempFileNameW
GetLongPathNameW
MoveFileW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetACP
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
user32
DispatchMessageW
IsDialogMessageW
CreateDialogParamW
LoadIconW
SetTimer
TranslateMessage
ScreenToClient
GetMessageW
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
GetDlgItem
EndDialog
GetWindowTextW
SetWindowTextW
KillTimer
EnableWindow
GetActiveWindow
GetDesktopWindow
LoadStringW
IsWindowVisible
PostQuitMessage
gdi32
DeleteObject
CreateSolidBrush
ole32
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE