Static task
static1
Behavioral task
behavioral1
Sample
b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19.exe
Resource
win10v2004-20231020-en
General
-
Target
b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19
-
Size
654KB
-
MD5
d973b475b17ea776dcff0ba015cc57af
-
SHA1
77aebb60365a30352ccff0a416b2040733c67083
-
SHA256
b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19
-
SHA512
6ab9411fd5471088f1d61b1bcd773a721b2db795387a502f1a779bcfd01f9276dab3fc9c37f000d111b2ac95f8425c41ce73623b8a2d02c4eeae3a36eb6d5f42
-
SSDEEP
12288:DlI3t2Lyj/Ux5wlmcO3AMuIRVRD4sPKXW0F+52ULu8emuH39cs:a3cLsUx5wQh9uIRVR9KXnFiL5uXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19
Files
-
b262391c120148e8a3d6b5f1bdfc41ae1ed18f42f3eca5e169fd2ecc505d3d19.exe windows:6 windows x86 arch:x86
a9183cabbff6804056c22b4382aabec8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetModuleFileNameW
CreateMutexA
GetFileAttributesW
MultiByteToWideChar
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
GetModuleHandleW
WideCharToMultiByte
ReadFile
SetLastError
WriteFile
CreateFileW
GetCurrentThreadId
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
OutputDebugStringA
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
DecodePointer
WriteConsoleW
HeapSize
FlushFileBuffers
GetConsoleCP
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetStringTypeW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
SizeofResource
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueueTimer
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EncodePointer
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
HeapAlloc
HeapFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetFileType
LCMapStringW
user32
EnumDisplayMonitors
GetMonitorInfoW
GetWindowLongW
GetWindowThreadProcessId
DefWindowProcW
FindWindowExW
GetWindowRect
GetFocus
GetDC
GetPropW
CreateWindowExW
SendMessageW
RemovePropW
SetWindowTextW
ShowWindow
SetTimer
RegisterClassW
MessageBoxA
MoveWindow
IntersectRect
SetFocus
SetPropW
SetCapture
SetWindowLongW
GetClientRect
UpdateLayeredWindow
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
EndPaint
ScreenToClient
gdi32
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
SetBitmapBits
GetObjectW
DeleteObject
GetCurrentObject
Sections
.text Size: 435KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 33B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ