Static task
static1
Behavioral task
behavioral1
Sample
a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf.exe
Resource
win10v2004-20231020-en
General
-
Target
a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf
-
Size
583KB
-
MD5
8b20e2ea1c6a5984cac97e80c5288846
-
SHA1
15dcc4529b690e58d04ef391a57c7d3cd95ffd2a
-
SHA256
a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf
-
SHA512
49b68e6f85884c78ff1b6c16e38e968786649fa50b5187c4bb1ef8bae28c8fffdd10a6cbb1f24838a1a236e936af40cdbf131b0df10e2aba79e78ccbaae9f2c4
-
SSDEEP
6144:P4rz6eJGxHQHG4MuUfDcuEFv6okzIiTz:P4reIA4afDcukv6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf
Files
-
a55d4f0c9679abd958130d1de0c74ca968523f89b7950474f9686e37784c3ecf.exe windows:5 windows x64 arch:x64
b92ce074ad7bcf2bf0e3fac97c2c7f9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
VirtualProtect
LoadLibraryA
GetTimeZoneInformation
CloseHandle
CreateFileW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapFree
HeapQueryInformation
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
GetVersion
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlLookupFunctionEntry
RtlUnwindEx
DecodePointer
GetModuleHandleW
ExitProcess
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetStartupInfoW
HeapSize
HeapValidate
IsBadReadPtr
FlsGetValue
FlsSetValue
GetCurrentThreadId
FlsAlloc
FlsFree
SetLastError
GetLastError
GetCurrentThread
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapSetInformation
FlushFileBuffers
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ