Static task
static1
Behavioral task
behavioral1
Sample
1def37b6ec21d2041f080bb56bf8eb4c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1def37b6ec21d2041f080bb56bf8eb4c.exe
Resource
win10v2004-20231201-en
General
-
Target
1def37b6ec21d2041f080bb56bf8eb4c
-
Size
5.8MB
-
MD5
1def37b6ec21d2041f080bb56bf8eb4c
-
SHA1
08122372f3c29df14fd087822b51073d5a711572
-
SHA256
e3b7d5471bd7c7ab01581b323b52a9d21fc7834a150b5ffabdfc081c59bebdc9
-
SHA512
4723d0577772cbe187fd63b7ac97cabc3ac5a473e172678877ef942a0e91511bbd01a0fee3f3c7913a5090f9ecf8925a708c05703518a06744cff61624b8a273
-
SSDEEP
24576:pO7Kmv+xhC9+1gqFj5m7yHQ9lOsh3Y33Z0rbXzvRfQ7VpaS4yEYJKHoNs0blHWoy:pv0pyHQLMEb9WVJ1oo1h4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1def37b6ec21d2041f080bb56bf8eb4c
Files
-
1def37b6ec21d2041f080bb56bf8eb4c.exe windows:5 windows x86 arch:x86
4f671a1e5b2f51886de40b56f83fc4e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollInfo
IsRectEmpty
GetWindowRect
BeginPaint
AppendMenuW
GetMenuItemID
EnableMenuItem
ShowWindow
kernel32
GetNumaHighestNodeNumber
WriteConsoleW
SetStdHandle
GetStringTypeW
LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
VirtualAllocEx
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SystemTimeToFileTime
LoadLibraryExW
CloseHandle
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
CreateThread
ExitThread
HeapFree
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
CreateFileW
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
HeapAlloc
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
IsDebuggerPresent
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
FlushFileBuffers
Sections
.text Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n2e6d5 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bd4n Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ