Static task
static1
Behavioral task
behavioral1
Sample
362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c.exe
Resource
win10v2004-20231020-en
General
-
Target
362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c
-
Size
1.0MB
-
MD5
eeac3f1c79162a0e8359d05990877690
-
SHA1
ccdcbcc2eb7c6caae19a11f9de6d7ad016bae62c
-
SHA256
362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c
-
SHA512
5662baadf70ffe650671b64439534f7c83a6493f1ab49d201b78936331c91b59563e7f9c5996fb8bb8090e2f4f062d0616a9c4dbf59fcafaf133137fddfaa519
-
SSDEEP
12288:+inHr8ASMzg8xwZSYWoNk/DTfNq0qE5Uj8OURZZ7kWf5FWQZIPRx0tHjMav/L2DU:+laOybTuE5keZnCMHdvDn2cAy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c
Files
-
362f9ef74823b614421837791f691ec90542ba226f2551cf8c2cb9fc2ea29c3c.exe windows:5 windows x86 arch:x86
c69aa6ebb63b06f984af21e745b023b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DecodePointer
LockResource
FreeLibrary
GetProcAddress
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetCurrentThreadId
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
LoadLibraryW
GetModuleHandleW
FindResourceW
FindResourceExW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
SetLastError
CloseHandle
lstrcmpiW
CreateMutexW
LoadLibraryExW
CopyFileW
GetVersionExW
LocalFree
GetFileSizeEx
WriteFile
ReadFile
CreateFileW
SetProcessShutdownParameters
OpenProcess
GetCurrentProcessId
WaitForSingleObject
OutputDebugStringW
GetCurrentProcess
GetTickCount
CreateProcessW
GetStartupInfoW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
WriteConsoleW
GetACP
GetStdHandle
ExitProcess
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
FreeResource
GetSystemWindowsDirectoryW
CreateFileA
lstrcmpiA
lstrcmpA
DeviceIoControl
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
WideCharToMultiByte
GetStringTypeW
FormatMessageW
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
DeleteFileW
lstrcpynW
lstrlenW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
SetFilePointer
FlushFileBuffers
ReleaseMutex
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
SetEvent
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
InitializeCriticalSectionEx
FindClose
GetSystemDirectoryW
FindFirstFileW
FindNextFileW
GetCurrentThread
OpenThread
SetThreadPriority
GetThreadPriority
GetThreadContext
SuspendThread
ResumeThread
Sleep
user32
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
ScreenToClient
GetWindowRect
GetClientRect
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
CharNextW
PostQuitMessage
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
PostMessageW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
CopyRect
OffsetRect
UnionRect
EqualRect
PtInRect
SetCursor
DrawFocusRect
wsprintfW
ShowWindow
WaitForInputIdle
UpdateLayeredWindow
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
VarUI4FromStr
SysStringLen
SysAllocStringLen
Sections
.text Size: 606KB - Virtual size: 606KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 161KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ