Static task
static1
Behavioral task
behavioral1
Sample
5616230278c620473bc54d724ef9cad6cc9e62391ad72abd72bdd81c349fa0cf.exe
Resource
win7-20231020-en
General
-
Target
5616230278c620473bc54d724ef9cad6cc9e62391ad72abd72bdd81c349fa0cf
-
Size
3.8MB
-
MD5
b3accc4986ed235e87e516022ee71479
-
SHA1
a0f720b49e7b7cd1bb74560afa0b86d8f7aa7e7c
-
SHA256
5616230278c620473bc54d724ef9cad6cc9e62391ad72abd72bdd81c349fa0cf
-
SHA512
c924c8174214f150f6f7c38324c5159d192ca90ae265c88a35a13c1db9d154a0a55bb76df1996ba2a8a871f7136b50b4b9d64ea3a22516dd28c4838da4f85a62
-
SSDEEP
98304:yXh2nI3A7SN1QAOHVDayPJC7KAZ9cFlw:qiqIPg3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5616230278c620473bc54d724ef9cad6cc9e62391ad72abd72bdd81c349fa0cf
Files
-
5616230278c620473bc54d724ef9cad6cc9e62391ad72abd72bdd81c349fa0cf.exe windows:5 windows x86
04b197eb6b3ff64fb823c09ad3ecdcec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
GetConsoleAliasA
FlushViewOfFile
GetNumaNodeProcessorMask
DisconnectNamedPipe
SetNamedPipeHandleState
OpenProcess
GetProcessAffinityMask
SetVolumeLabelW
GetPrivateProfileStringA
GetQueuedCompletionStatus
ClearCommError
HeapAlloc
SetConsoleWindowInfo
GetLastError
FindFirstFileExA
OpenFileMappingA
LocalAlloc
GetProcAddress
GetModuleHandleA
lstrcatA
GetThreadSelectorEntry
GetExitCodeThread
GetEnvironmentVariableW
GetAtomNameW
SetConsoleScreenBufferSize
BuildCommDCBAndTimeoutsA
CreateMailslotW
GetPriorityClass
FindFirstVolumeMountPointW
CreateFileW
WriteConsoleW
LoadLibraryW
LoadResource
FindAtomW
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
SetFilePointer
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
user32
GetCaretBlinkTime
ClientToScreen
advapi32
InitializeAcl
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ