Static task
static1
Behavioral task
behavioral1
Sample
b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604.exe
Resource
win10v2004-20231023-en
General
-
Target
b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604
-
Size
10.6MB
-
MD5
cbdde4e4c0b2ec488e3bf34d8af909f3
-
SHA1
9ee2b3c5db5fb9611a483081814d3b7c58b81fe2
-
SHA256
b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604
-
SHA512
39bf79a99e2c2a73e93df5a663ba337c1c5ea572ee43b26bc4d466d6321317583ba89d8efeb6cee916f3067e20d3d123429f7e9c9835d14e1e3054ec785a8ac5
-
SSDEEP
24576:ULymmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmn:Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604
Files
-
b9fcb18a0b7b2dd54868b0eec0b4e143c8afb792d7349dd54a68622fdf4dc604.exe windows:5 windows x86
c44af05e09fe671de192a7ec549c097a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCompact
SetPriorityClass
lstrlenA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
FreeLibrary
SystemTimeToTzSpecificLocalTime
GetQueuedCompletionStatus
GetCommState
SetEnvironmentVariableW
CreateJobObjectW
GetNamedPipeHandleStateA
CallNamedPipeW
WriteFile
SetCommState
SetProcessPriorityBoost
TlsSetValue
ActivateActCtx
GlobalAlloc
LoadLibraryW
CopyFileW
_hread
GetPrivateProfileStructW
GetVersionExW
SetConsoleMode
IsDBCSLeadByte
lstrcatA
GetBinaryTypeW
GetOverlappedResult
SetDefaultCommConfigA
RaiseException
GetNamedPipeHandleStateW
SetLastError
GetTapeStatus
VirtualAlloc
BeginUpdateResourceW
IsValidCodePage
GetConsoleDisplayMode
EnterCriticalSection
LoadLibraryA
SetConsoleOutputCP
AddAtomW
PostQueuedCompletionStatus
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
GetThreadPriority
CreateIoCompletionPort
DebugBreakProcess
CreateMutexA
RequestWakeupLatency
VirtualProtect
GetCurrentDirectoryA
LocalSize
AddConsoleAliasA
CopyFileExA
CommConfigDialogW
GetACP
GetComputerNameA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapCreate
VirtualFree
TlsGetValue
TlsAlloc
TlsFree
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
user32
GetAncestor
advapi32
ImpersonateSelf
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.5MB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ