Static task
static1
Behavioral task
behavioral1
Sample
9ba8bae87a9665c5683c4f5111fccfe524ba8671180c8d6cc8a9bd20f2f30f35.exe
Resource
win10v2004-20231127-en
General
-
Target
9ba8bae87a9665c5683c4f5111fccfe524ba8671180c8d6cc8a9bd20f2f30f35
-
Size
257KB
-
MD5
e1db58927595887f3528ccd12a9b3139
-
SHA1
ddddbc9ba3112f0bdcbe0e6fa75bcfb74c68f1cb
-
SHA256
9ba8bae87a9665c5683c4f5111fccfe524ba8671180c8d6cc8a9bd20f2f30f35
-
SHA512
4809cd07c8847e2d3812f75a97526fc2f32703b3f8b3dc0b60b3335432e595031147a8245913ba731c2996acaa0a93aae255e29a729870eb9a4eee9710d9f6a7
-
SSDEEP
3072:0gyUuwY/K2ljlmngPavJrM8ZWp9yJANfgX24vCdQXG+oMyVSzjJSAPov1z:jynM2XavJY8ZWpqANqvCV+oMUKk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ba8bae87a9665c5683c4f5111fccfe524ba8671180c8d6cc8a9bd20f2f30f35
Files
-
9ba8bae87a9665c5683c4f5111fccfe524ba8671180c8d6cc8a9bd20f2f30f35.exe windows:5 windows x86 arch:x86
8ec4136096a86bb9426658d99220fe79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
PeekNamedPipe
BuildCommDCBAndTimeoutsA
UpdateResourceA
GlobalAddAtomA
OpenJobObjectA
InterlockedDecrement
CreateJobObjectW
GetNamedPipeHandleStateA
GetProfileSectionA
WriteConsoleInputA
GetModuleHandleW
LocalFlags
GetNumberFormatA
GetCompressedFileSizeW
GetCommandLineA
GlobalAlloc
LoadLibraryW
GetLocaleInfoW
SetVolumeMountPointA
GetVersionExW
ReadFile
GetVolumePathNameA
VirtualUnlock
GetShortPathNameA
GetDateFormatW
DeleteFiber
GetStartupInfoA
FindFirstFileA
GetLastError
SetLastError
GetProcAddress
HeapSize
PeekConsoleInputW
IsValidCodePage
_hwrite
OpenWaitableTimerA
WriteConsoleA
FindFirstVolumeMountPointW
GetModuleHandleA
FreeEnvironmentStringsW
FindNextFileW
GetCurrentDirectoryA
WaitForDebugEvent
GetCPInfoExA
GetWindowsDirectoryW
GetVolumeNameForVolumeMountPointW
GetProfileSectionW
CommConfigDialogW
CreateFileW
FlushFileBuffers
WriteConsoleW
InterlockedExchange
LocalUnlock
SetStdHandle
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
DeleteFileA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
GetACP
GetOEMCP
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
CloseHandle
user32
CharUpperA
CharToOemBuffA
advapi32
DuplicateToken
shell32
DragAcceptFiles
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ