Static task
static1
Behavioral task
behavioral1
Sample
9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42.exe
Resource
win10v2004-20230915-en
General
-
Target
9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42
-
Size
829KB
-
MD5
2fc8682b8f72ff5efa7b9fc4b9b7cb5a
-
SHA1
e76c72e0a842a6aa5fc0c867cb32c279a1e55e0a
-
SHA256
9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42
-
SHA512
4701874e6e08532920c8a629e85ac869b774450cd526c2def5811c6a4d9b9ca45082e8f610f6de53f93bdd54400f783cadda572a4795fce1b6aa5691e0de30e4
-
SSDEEP
6144:e6Dd5Y/+4FRWgNJ6DQwbKbDS6JPAl+eNDaDSIFhSMXlBXBWgkKb5iJNk:BcfNzwbSdJP9ewDSIFhSMXllzb5iJNk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42
Files
-
9a60b2c124f0c3f9c9b11cae39b7e0e65f018a45cf30f0ce1b6e3ebd68397b42.exe windows:6 windows x86
375891eed7a85499a2e6ca0e5b8127aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord345
userenv
CreateAppContainerProfile
DeleteAppContainerProfile
GetAppContainerFolderPath
kernel32
LocalFree
GetProcAddress
GetModuleHandleW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
HeapFree
HeapAlloc
GetLastError
CloseHandle
GetFileAttributesW
OutputDebugStringA
FlushFileBuffers
HeapSize
HeapReAlloc
SetEndOfFile
InitializeProcThreadAttributeList
CreateProcessW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
ReadConsoleW
LCMapStringW
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
GetCPInfo
SetStdHandle
ReadFile
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
GetCommandLineW
GetProcessHeap
GetFinalPathNameByHandleW
GetModuleFileNameW
CreateFileW
GetFullPathNameW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
FormatMessageW
GetFileInformationByHandleEx
GetStdHandle
WriteFile
SetConsoleMode
GetConsoleMode
WriteConsoleW
GetFileType
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
DecodePointer
gdi32
GetStockObject
SetTextColor
SetBkMode
SetBkColor
DeleteObject
CreateSolidBrush
advapi32
SetEntriesInAclW
FreeSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
AllocateAndInitializeSid
ConvertSidToStringSidW
IsWellKnownSid
CreateWellKnownSid
CopySid
CheckTokenMembership
ole32
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
user32
GetWindowLongW
GetWindowTextLengthW
GetSystemMenu
DestroyWindow
CreateWindowExW
SetWindowTextW
ChangeWindowMessageFilter
SetFocus
LoadIconW
InsertMenuW
SetWindowLongW
SetForegroundWindow
PostQuitMessage
DialogBoxParamW
InvalidateRect
EnableWindow
GetWindowTextW
SendMessageW
GetDlgItem
shell32
DragAcceptFiles
DragQueryFileW
DragFinish
ShellExecuteW
comdlg32
ChooseColorW
Sections
.text Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ