Static task
static1
Behavioral task
behavioral1
Sample
bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c.exe
Resource
win10v2004-20230915-en
General
-
Target
bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c
-
Size
1.1MB
-
MD5
487d73bd0295c562eb11eb4cd9481945
-
SHA1
d897b93a70ff9dd3733f1050bf17d76cf169484f
-
SHA256
bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c
-
SHA512
709ac0c6c6061a96889ae6f3da19816a16e9c3bb9b285e75b2c98c153b51ef55bbc307b7c7d796b37bf8016b6c893ed3e68381f06e6972cef12d15e0353d26d4
-
SSDEEP
24576:k/38cXrMcudHESEtJibUuNHVOkn896O43F:kvCyJibUuN1o8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c
Files
-
bc080d336b03ab363dc7b6ae625d9cab436c6f20d21284c05323f5d75ff0501c.exe windows:6 windows x64
1c36b3cf85f14f2dac79a1fcd682143c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
iphlpapi
GetAdaptersInfo
ws2_32
WSASend
closesocket
WSAGetLastError
ioctlsocket
recv
send
connect
WSAGetOverlappedResult
getsockname
getsockopt
WSASetLastError
getpeername
select
WSAIoctl
WSARecv
WSAStartup
setsockopt
accept
listen
sendto
bind
socket
recvfrom
htonl
kernel32
HeapSize
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetEnvironmentVariableA
MultiByteToWideChar
GetSystemFirmwareTable
ReadFile
GetFileSizeEx
WriteFile
GetUserDefaultUILanguage
CreateFileW
GetLastError
CreateFileA
DeleteFileA
CloseHandle
GetSystemInfo
SetFilePointerEx
FindFirstFileA
LoadLibraryExA
GetModuleFileNameW
FindNextFileA
CreateMutexA
GetFileAttributesW
SetDllDirectoryA
LoadLibraryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
WriteConsoleW
ResetEvent
WaitForSingleObject
CreateEventA
GetCurrentThreadId
GetTickCount
UnmapViewOfFile
GetSystemDirectoryA
LocalAlloc
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
Sleep
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ReleaseSemaphore
CreateSemaphoreA
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetEndOfFile
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
HeapAlloc
LCMapStringW
CompareStringW
SetEvent
GetTimeFormatW
GetDateFormatW
HeapFree
GetStdHandle
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
SetConsoleCtrlHandler
GetModuleHandleExW
ExitProcess
ReadConsoleW
GetConsoleMode
SetStdHandle
GetCommandLineW
GetCommandLineA
GetFileType
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetTimeZoneInformation
user32
EnableWindow
GetCursorPos
SetForegroundWindow
DialogBoxParamW
PostQuitMessage
AppendMenuW
GetDlgItem
LoadIconW
DestroyMenu
SetWindowTextA
ShowWindow
TrackPopupMenu
CreatePopupMenu
SetWindowTextW
EndDialog
MessageBoxW
SendMessageW
Sections
.text Size: 653KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ