Static task
static1
Behavioral task
behavioral1
Sample
2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f.exe
Resource
win10v2004-20231023-en
General
-
Target
2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f
-
Size
583KB
-
MD5
44a4c259704ad7b90403972c985caaa7
-
SHA1
7813a23f45634f2c820151bd956f29ed344535c5
-
SHA256
2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f
-
SHA512
4cf1352641f19a18cd3c87f119491f7a8804106a7a077545ee9f9f51b9d91e728bb1d376c96ef4af0c525df245a9fc59da4feb4fc93a6dbb6b45650c4193a635
-
SSDEEP
6144:S4rz6eJGxHQHG4MuUfDcuEFv6gkkIiTz:S4reIA4afDcukv6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f
Files
-
2e1b932c99756d1da7c29d3a7a1cd1a16ca0ee8b31ce1ccdff9b6fbd6e75ba4f.exe windows:5 windows x64 arch:x64
b92ce074ad7bcf2bf0e3fac97c2c7f9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
VirtualProtect
LoadLibraryA
GetTimeZoneInformation
CloseHandle
CreateFileW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapFree
HeapQueryInformation
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
GetVersion
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlLookupFunctionEntry
RtlUnwindEx
DecodePointer
GetModuleHandleW
ExitProcess
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetStartupInfoW
HeapSize
HeapValidate
IsBadReadPtr
FlsGetValue
FlsSetValue
GetCurrentThreadId
FlsAlloc
FlsFree
SetLastError
GetLastError
GetCurrentThread
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapSetInformation
FlushFileBuffers
user32
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ