Static task
static1
Behavioral task
behavioral1
Sample
61f53dfc5378dca8269916de5be6a6a3b3633c23473e6a91af46b3e3cb96f046.exe
Resource
win7-20230831-en
General
-
Target
61f53dfc5378dca8269916de5be6a6a3b3633c23473e6a91af46b3e3cb96f046
-
Size
699KB
-
MD5
89b55726b755f139c66b1e043317577d
-
SHA1
949d42314e52d3b498914b4bce52532379bdba8c
-
SHA256
61f53dfc5378dca8269916de5be6a6a3b3633c23473e6a91af46b3e3cb96f046
-
SHA512
f37ee0ed279c49bef5de89bb66b936c7c06d22ffd9070bef44bc42d0b5c9a1fd693701fbe784c654c9d37b8ecea6db4ee2336981459d36b1e7f5689408b9719f
-
SSDEEP
12288:aM+ZdkmHubeaCo6oEPVj2A/sUQBJ8uy73a/:aMcpTo6BNP0BOF7K/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 61f53dfc5378dca8269916de5be6a6a3b3633c23473e6a91af46b3e3cb96f046
Files
-
61f53dfc5378dca8269916de5be6a6a3b3633c23473e6a91af46b3e3cb96f046.exe windows:4 windows x86
bb21c653f2650afb8f0b0629bdc80811
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
WaitForMultipleObjects
Sleep
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
FileTimeToLocalFileTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcessTimes
OpenEventW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GlobalMemoryStatus
GetSystemInfo
lstrlenW
lstrcatW
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
GetDriveTypeW
GetFileInformationByHandle
SetEndOfFile
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventW
SetEvent
InitializeCriticalSection
LoadLibraryA
GetVersionExW
FileTimeToSystemTime
GetCommandLineW
GetStartupInfoA
GetTempPathW
GetFileAttributesW
GetModuleHandleA
FindNextFileW
FindFirstFileW
FindClose
GetCurrentThreadId
GetTickCount
GetCurrentDirectoryW
SetCurrentDirectoryW
SetLastError
DeleteFileW
CreateDirectoryW
GetModuleHandleW
GetProcAddress
MoveFileW
RemoveDirectoryW
SetFileAttributesW
CreateFileW
SetFileTime
CloseHandle
FormatMessageW
LocalFree
GetModuleFileNameW
LoadLibraryW
LoadLibraryExW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetCurrentProcessId
gdi32
TextOutA
StartPage
StartDocA
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt
GetEnhMetaFileA
GetEnhMetaFileW
advapi32
RegOpenKeyW
Sections
.text Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
y1tta28 Size: 512B - Virtual size: 345B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y1tta Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ