Static task
static1
Behavioral task
behavioral1
Sample
2e46501f5ea8efd700f4d559370be09e.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2e46501f5ea8efd700f4d559370be09e.exe
Resource
win10v2004-20231201-en
General
-
Target
2e46501f5ea8efd700f4d559370be09e
-
Size
10.5MB
-
MD5
2e46501f5ea8efd700f4d559370be09e
-
SHA1
07cda45923b82af018567e612e66116d2cc02d3e
-
SHA256
f13bc769aa273993adcc74bf8269594b0c8cedd1b6420e8406851984b53c1565
-
SHA512
7ce583bf2cc662d723a6e01bffcf531ed44ab26f4c5698252c36b4a63a68d1f73a47f8498e934d8f7dfdc7ff30dede17a66a474ce8848e3fbc79cdeb2080805b
-
SSDEEP
24576:f/ixNjPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPn:3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e46501f5ea8efd700f4d559370be09e
Files
-
2e46501f5ea8efd700f4d559370be09e.exe windows:5 windows x86 arch:x86
f73cc3008b1a832c02f37e3da21de404
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExA
WriteConsoleInputA
ReadConsoleInputA
GetTapeParameters
SetTapePosition
WriteTapemark
GetConsoleAliasesW
WriteConsoleW
SetLastError
BuildCommDCBW
CreateFileA
DeleteFileA
WritePrivateProfileSectionA
GetPrivateProfileSectionW
WriteProfileSectionW
GetLongPathNameA
RequestDeviceWakeup
LoadLibraryA
FlushFileBuffers
ReadFile
WriteFile
GetProfileSectionA
BuildCommDCBA
FindActCtxSectionGuid
SetEndOfFile
ReleaseActCtx
WriteProcessMemory
GetFileAttributesA
SetEvent
PulseEvent
ResetEvent
ReleaseSemaphore
SleepEx
WaitForSingleObject
WaitForMultipleObjects
GetConsoleAliasesLengthW
ReadConsoleW
ZombifyActCtx
GetEnvironmentStrings
GetGeoInfoA
VirtualProtect
GetProcAddress
GetModuleHandleW
HeapUnlock
SetLocaleInfoW
GetOEMCP
WaitForMultipleObjectsEx
GetAtomNameA
CreateJobObjectW
HeapCompact
WideCharToMultiByte
GetUserDefaultLCID
GetLongPathNameW
ProcessIdToSessionId
SetFileShortNameA
GetCommandLineA
GetStartupInfoA
GetLastError
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleCP
GetConsoleMode
CloseHandle
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
IsValidCodePage
MultiByteToWideChar
WriteConsoleA
GetConsoleOutputCP
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
advapi32
AdjustTokenPrivileges
MapGenericMask
AreAnyAccessesGranted
AdjustTokenGroups
winhttp
WinHttpSetOption
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.4MB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ