Static task
static1
Behavioral task
behavioral1
Sample
a37187c1b3fedca26b6416e10cdab4feae86e6a5f7140487f3f2d7f2fa088e40.exe
Resource
win10-20230831-en
General
-
Target
a37187c1b3fedca26b6416e10cdab4feae86e6a5f7140487f3f2d7f2fa088e40
-
Size
749KB
-
MD5
c2ab34e22731eda5d7be4450c6d8360f
-
SHA1
674696af77f6ac0125daf2b616f86ffc73270213
-
SHA256
a37187c1b3fedca26b6416e10cdab4feae86e6a5f7140487f3f2d7f2fa088e40
-
SHA512
85a98862b243e6b0397478a4d2d5395f9155dbf4f4d478ea965c4af7f0e8a554597971e63fb6b92c2e9690c4db0c074977a362971b4a580d97de300ce34380d7
-
SSDEEP
12288:jqGw0v5K8BI2tcgBjM9m5hS+3HWnEpulYCQgecjePoAoE7y8VJXb6F9f:jqGw0vxbthBj+sh5HWcul2KePkE7y8Va
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a37187c1b3fedca26b6416e10cdab4feae86e6a5f7140487f3f2d7f2fa088e40
Files
-
a37187c1b3fedca26b6416e10cdab4feae86e6a5f7140487f3f2d7f2fa088e40.exe windows:5 windows x86
f6ae9fa982c7b2e4f0f70bace818439e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
GetConsoleAliasesLengthW
PeekNamedPipe
WriteConsoleOutputCharacterA
LoadResource
EndUpdateResourceW
OpenJobObjectA
GetSystemWindowsDirectoryW
AddConsoleAliasW
SetVolumeMountPointW
GetTickCount
GetCompressedFileSizeW
SetProcessPriorityBoost
GlobalAlloc
LoadLibraryW
IsProcessInJob
GetFileAttributesA
EnumSystemCodePagesA
GetNamedPipeInfo
GetVolumePathNameA
GetLargestConsoleWindowSize
ReleaseActCtx
GetLastError
GetProcAddress
VirtualAlloc
FillConsoleOutputCharacterA
BeginUpdateResourceW
BackupWrite
RemoveDirectoryA
SetComputerNameA
GlobalFree
CreateHardLinkW
GetNumberFormatW
AddAtomW
SetFileApisToANSI
FoldStringW
GetOEMCP
FindNextFileA
OpenFileMappingW
FreeEnvironmentStringsW
_lopen
GetWindowsDirectoryW
GetCurrentProcessId
ReadFile
GetProcessHeap
PeekConsoleInputW
GetComputerNameA
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
LoadLibraryA
CloseHandle
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetEndOfFile
user32
LoadMenuW
CharToOemBuffW
ChangeDisplaySettingsA
GetWindowTextLengthA
gdi32
GetCharABCWidthsFloatA
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ