Static task
static1
Behavioral task
behavioral1
Sample
abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27.exe
Resource
win10v2004-20231023-en
General
-
Target
abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27
-
Size
13.3MB
-
MD5
605848d322d3b2762909dffebc65c17c
-
SHA1
ce3cc4d0873658185c893657696bcb7241f5b855
-
SHA256
abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27
-
SHA512
cb1690a4e78e82c0d8fcb497849fb520e185df94f09072b4e789c61a5fde48de24b1169f3b49a3715add970ccc2a1d4a1289665982fea41adeb8fbca172d5ab3
-
SSDEEP
393216:t0uK3ZAw1z798ZDSKFLgbVeazqqi77PclxMy:6lZAw7Eqo/PI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27
Files
-
abfb6c9464f678fa181ed923c37232526e39bf4d5f3d37981022d0b814213b27.exe windows:6 windows x86 arch:x86
34466609d60ce87cb4053a5f6ac233a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
lstrlenW
GetTempPathW
GetLastError
GetTempFileNameW
MoveFileW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
DeleteFileW
GetModuleFileNameW
GetCurrentProcess
LoadLibraryW
FreeLibrary
InitializeCriticalSectionEx
FreeResource
LoadResource
FindResourceW
SizeofResource
LockResource
CreateDirectoryW
VerSetConditionMask
CopyFileW
GetFileAttributesW
CreateFileW
SetFilePointer
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryW
MultiByteToWideChar
LocalFileTimeToFileTime
WideCharToMultiByte
WriteFile
SetFileTime
CreateProcessW
lstrcmpiW
LeaveCriticalSection
RaiseException
EnterCriticalSection
LoadLibraryExW
GetSystemDirectoryW
SetDefaultDllDirectories
GetCurrentThreadId
DecodePointer
OutputDebugStringW
LocalFree
VerifyVersionInfoW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
GetStringTypeW
FlushFileBuffers
SetFilePointerEx
WriteConsoleW
SetEndOfFile
ReadConsoleW
comctl32
InitCommonControlsEx
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91.5MB - Virtual size: 91.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ