Static task
static1
Behavioral task
behavioral1
Sample
87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf.exe
Resource
win10v2004-20230915-en
General
-
Target
87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf
-
Size
542KB
-
MD5
b0e6a7c8e6ea220a600f57267edbfe4c
-
SHA1
461196f477a64b8f23c50d31d800841d2cadad99
-
SHA256
87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf
-
SHA512
7a50f95339cdd990c6beff4711f72a0378d7d408881d4e3471f5ba2063b0650db3f81d4e7e5cf3e7dacf053ab0bc8b4e379180f65b493be92b9bb4bccda7534a
-
SSDEEP
6144:x8xhX+BKzD8HwHU1W90oJjXrmeqpa/8x9NbjR/:aX+BX1W9pFXrmeq8k3t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf
Files
-
87da1a37395926b05e058c2cf221b806c99e69f3e609ff209e342d488be9efdf.exe windows:5 windows x64
85630e87c69758ae915aa0769bfd5aa6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
VirtualProtect
AddVectoredExceptionHandler
GetTimeZoneInformation
Sleep
FlushFileBuffers
CloseHandle
CreateFileW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
RtlLookupFunctionEntry
RtlUnwindEx
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
GetCommandLineA
FlsGetValue
FlsSetValue
GetCurrentThreadId
FlsAlloc
FlsFree
SetLastError
GetLastError
GetCurrentThread
HeapSize
HeapValidate
IsBadReadPtr
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
GetModuleHandleW
ExitProcess
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
LCMapStringW
GetStringTypeW
SetFilePointer
InitializeCriticalSection
user32
EnumThreadWindows
winhttp
WinHttpSendRequest
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpReceiveResponse
WinHttpOpenRequest
Sections
.text Size: 423KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ