Static task
static1
Behavioral task
behavioral1
Sample
a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604.exe
Resource
win10v2004-20231020-en
General
-
Target
a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604
-
Size
1.0MB
-
MD5
73343fe1e9b04ea20fc21d1925b159cd
-
SHA1
d5cfd6aa00af2dc0aa6621adba65d9085b673fe6
-
SHA256
a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604
-
SHA512
667e521d7f5808274dd2e93562f0c4183424ab8e5caea5405bc4af2ab082a3165d8906903c50ec3bf741cb192e3ef6f7c36c4b4543a681057b4818c1d500858d
-
SSDEEP
12288:vu3rGVWfs3g3sA06SG0i+CX4TXBShAXyTUuxTYYYIwmCCxvbCyTSXgkPcID1KukQ:v/CEcX4ohAC3FBXMXgknD1Vv+Fg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604
Files
-
a85308b1c3c81f11e7d9b320834dba3329747c835252d40a49daea32fada0604.exe windows:5 windows x86 arch:x86
08c49a602d98b51390530f41e2b36ca5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DecodePointer
LockResource
FreeLibrary
GetProcAddress
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetCurrentThreadId
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
LoadLibraryW
GetModuleHandleW
FindResourceW
FindResourceExW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
SetLastError
CloseHandle
lstrcmpiW
CreateMutexW
LoadLibraryExW
CopyFileW
GetVersionExW
LocalFree
GetFileSizeEx
WriteFile
ReadFile
CreateFileW
SetProcessShutdownParameters
OpenProcess
GetCurrentProcessId
WaitForSingleObject
OutputDebugStringW
GetCurrentProcess
GetTickCount
CreateProcessW
GetStartupInfoW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
WriteConsoleW
GetACP
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
RtlUnwind
FreeResource
GetSystemWindowsDirectoryW
CreateFileA
lstrcmpiA
lstrcmpA
DeviceIoControl
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
WideCharToMultiByte
GetStringTypeW
FormatMessageW
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
DeleteFileW
SetFilePointer
FlushFileBuffers
ReleaseMutex
lstrcpynW
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
SetEvent
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
InitializeCriticalSectionEx
FindClose
GetSystemDirectoryW
FindFirstFileW
FindNextFileW
GetCurrentThread
OpenThread
SetThreadPriority
GetThreadPriority
GetThreadContext
SuspendThread
ResumeThread
Sleep
user32
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
ScreenToClient
GetWindowRect
GetClientRect
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
CharNextW
PostQuitMessage
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
PostMessageW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
CopyRect
OffsetRect
UnionRect
EqualRect
PtInRect
SetCursor
DrawFocusRect
wsprintfW
ShowWindow
WaitForInputIdle
UpdateLayeredWindow
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
VarUI4FromStr
SysStringLen
SysAllocStringLen
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 161KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ