Static task
static1
Behavioral task
behavioral1
Sample
0d9895c0f610eaa133bbcb1069e19353.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0d9895c0f610eaa133bbcb1069e19353.exe
Resource
win10v2004-20231023-en
General
-
Target
0d9895c0f610eaa133bbcb1069e19353.exe
-
Size
970KB
-
MD5
0d9895c0f610eaa133bbcb1069e19353
-
SHA1
e24f42d4d246ca073849f1732da602b81ebc8ceb
-
SHA256
d8834028fb54c34a9889233eff9b318518e99abf33077d95a6ff92fa6f909643
-
SHA512
405da3aea7582ade0ec497ce4ec8acb3f7c4b537518b53a9d869f441c10cfd489a51cd1d393679176d3275e2f1f56f70d3b7c46823d1b0315b7778338ec87200
-
SSDEEP
24576:Gyfhy2GEkfNR3QHqFn1vmSNGKqiNmtdD:xfhZGEkfNR3QHqFn5mSkKqiNmT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9895c0f610eaa133bbcb1069e19353.exe
Files
-
0d9895c0f610eaa133bbcb1069e19353.exe.exe windows:6 windows x86
584bedc8d8bc077c5eb6b59391bf9d6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
SetTimer
ShowWindow
DispatchMessageW
TranslateMessage
GetMessageW
oleaut32
SysAllocString
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
kernel32
IsDebuggerPresent
CreateFileW
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetFilePointerEx
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetDiskFreeSpaceExA
GetTempFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
GlobalMemoryStatusEx
GetSystemTime
GetTickCount
VirtualProtect
WriteProcessMemory
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
GetConsoleWindow
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
LocalFree
CompareStringEx
GetCPInfo
GetLastError
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WriteConsoleW
GetStartupInfoW
GetModuleHandleW
FindClose
RaiseException
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
HeapReAlloc
GetFileType
GetTimeZoneInformation
Sections
.text Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ