Static task
static1
Behavioral task
behavioral1
Sample
583f31c3544fbc4c908820ab16abbaa4ec6aff612c90e0f9fdd455b6bb501f51.exe
Resource
win7-20231020-en
General
-
Target
583f31c3544fbc4c908820ab16abbaa4ec6aff612c90e0f9fdd455b6bb501f51
-
Size
1.1MB
-
MD5
e2c6a67a0adbcfe469b4a9a6bcf5207b
-
SHA1
30ea5a5551e4c6ccd7619207630847b2673fe5c6
-
SHA256
583f31c3544fbc4c908820ab16abbaa4ec6aff612c90e0f9fdd455b6bb501f51
-
SHA512
993614256ff7c166020a82f172269de1cbf293221c08d4e19356e5041508310dce155f847cdfebd771b9aadab3b103f75102c5b1693ad1bb07504f9d78c478f8
-
SSDEEP
24576:InQVklEs5OzYw5sfU0GMd2fa5t2hj81qGOT5PC6UAt/Mqb:JklEsIzrsfU00j+OT5HUAt/db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 583f31c3544fbc4c908820ab16abbaa4ec6aff612c90e0f9fdd455b6bb501f51
Files
-
583f31c3544fbc4c908820ab16abbaa4ec6aff612c90e0f9fdd455b6bb501f51.exe windows:5 windows x86
92fe3d24b5ae182212180af1fda095fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmDisableIME
kernel32
HeapFree
GetCurrentThreadId
GetVersionExW
OpenProcess
HeapAlloc
GetProcAddress
LocalFree
GetProcessHeap
LockResource
GetSystemInfo
LoadResource
FindResourceW
GetModuleHandleW
lstrcmpiW
QueryDosDeviceW
GetCurrentProcess
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
FreeLibrary
GetLogicalDriveStringsW
FindFirstFileW
GetLongPathNameW
CreateFileW
GetFileAttributesExW
ReadFile
WriteFile
SetFileTime
SetFilePointer
SetEndOfFile
GetFileSize
GetFileTime
CreateDirectoryW
GetFullPathNameW
lstrlenW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
GetWindowsDirectoryW
CopyFileW
GetTempFileNameW
FindNextFileW
FindClose
WaitForMultipleObjects
SetEvent
GetTickCount
InterlockedExchange
SetLastError
InterlockedExchangeAdd
GlobalMemoryStatusEx
GetCurrentProcessId
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStringW
lstrcpynW
GetExitCodeProcess
CreateProcessW
LoadLibraryExW
SetErrorMode
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
SwitchToThread
FormatMessageW
DeviceIoControl
GetFileSizeEx
FileTimeToSystemTime
GetEnvironmentVariableW
ResetEvent
CreateEventW
ResumeThread
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
HeapReAlloc
HeapSize
GetLastError
Sleep
ReleaseMutex
WaitForSingleObject
CreateMutexW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
CreateThread
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
GetStringTypeW
GetFileType
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DecodePointer
user32
GetActiveWindow
advapi32
GetUserNameW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetFolderPathW
ole32
CoTaskMemFree
Sections
.text Size: 782KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE