Static task
static1
Behavioral task
behavioral1
Sample
877e2a4cf4622423f06e2bcb0a8d7c47.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
877e2a4cf4622423f06e2bcb0a8d7c47.exe
Resource
win10v2004-20231215-en
General
-
Target
877e2a4cf4622423f06e2bcb0a8d7c47
-
Size
423KB
-
MD5
877e2a4cf4622423f06e2bcb0a8d7c47
-
SHA1
7ddfee667c11200a38ed997a1a40bdeb797b1e1a
-
SHA256
06cdbc3263666a16ae297579011c73e815f7c143e9105d72fe7eca5009b71c9f
-
SHA512
d37c3d3813155fc3c896b170efe543cab14281e34224341d912538c8c3faccb293f405ecda1bd646a4451eaaea8daa4b75e0a3075df5fb00d3c6a57e0fa818fc
-
SSDEEP
6144:phik6xnBRD/9KSDThr4Kdyj7XKUTa8m23d7KJqKWMJcjo+eCyGAtOe:DpYBRoYbI7XHgZQKhJgeCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 877e2a4cf4622423f06e2bcb0a8d7c47
Files
-
877e2a4cf4622423f06e2bcb0a8d7c47.exe windows:4 windows x86 arch:x86
fcd376aae4f5f2a6cb926124bd0387af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
GetModuleFileNameW
LoadLibraryW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLCID
GetACP
FileTimeToSystemTime
GetLastError
lstrlenW
RaiseException
InterlockedExchange
FreeLibrary
LocalAlloc
LocalFree
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetUserDefaultLCID
CompareStringW
IsValidLocale
MulDiv
OutputDebugStringA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetModuleHandleW
VirtualAlloc
SetLastError
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
VirtualFree
TlsSetValue
DeleteCriticalSection
TlsFree
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetModuleHandleA
GetLocaleInfoA
advapi32
RegOpenKeyExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptReleaseContext
CryptGenKey
CryptDestroyKey
gdi32
TextOutW
CreateFontIndirectA
GetObjectA
GetTextMetricsA
SelectObject
GetTextExtentPoint32W
CreatePen
SetBkColor
SetTextColor
SetTextAlign
DeleteObject
LineTo
MoveToEx
GetDeviceCaps
user32
SendDlgItemMessageW
GetDlgItem
LoadCursorW
RegisterClassExW
LoadIconW
GetWindowTextW
SetWindowPos
ReleaseDC
SetFocus
GetDC
GetClientRect
GetSysColor
GetFocus
DrawFocusRect
EndPaint
InvalidateRect
DefWindowProcW
GetParent
SendMessageW
LoadStringW
GetClassNameA
SendMessageA
BeginPaint
GetWindowLongA
GetWindowLongW
DrawTextA
DrawTextW
SetRectEmpty
MapWindowPoints
GetWindowRect
MoveWindow
IsWindowVisible
GetWindow
IsWindow
CreateWindowExA
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SystemParametersInfoA
LoadBitmapA
GetSystemMetrics
SetWindowTextW
GetDlgCtrlID
EndDialog
DialogBoxParamW
MessageBoxW
IsWindowUnicode
ole32
CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize
msvcrt
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__CxxFrameHandler
swprintf
memmove
_except_handler3
iswspace
_vsnwprintf
_CxxThrowException
??1type_info@@UAE@XZ
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 195KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE