Static task
static1
Behavioral task
behavioral1
Sample
70496b3f4312e81857e948685c1a24e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70496b3f4312e81857e948685c1a24e4.exe
Resource
win10v2004-20231215-en
General
-
Target
70496b3f4312e81857e948685c1a24e4
-
Size
300KB
-
MD5
70496b3f4312e81857e948685c1a24e4
-
SHA1
0c6decdd316b43c1f81ad2ffb8bcc43a7f356dcf
-
SHA256
c68e5c293fb4676d9c09fad9d457a03546f4379e177139d9fb0ce4602f521850
-
SHA512
181d34d408697bb6e6d621fc8ced0a78ce23c92f41c2db82bc8063608daa07dbd1b8c649c8550c2a28b2da2f8e2a7b02f69ba0495eb78ad26a07229c8cd08a1a
-
SSDEEP
6144:J0nYz536w6hyMiudSCF5vELn0ZEI/KpB3vcKrIhEbJ/0EWLfnLLe/h5:JKYzd6PVEavAs/KXrrLJMFfnLqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70496b3f4312e81857e948685c1a24e4
Files
-
70496b3f4312e81857e948685c1a24e4.exe windows:5 windows x86 arch:x86
30edd3444e3acdceb2721eb40b8dc180
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
SetFilePointer
lstrlenA
WritePrivateProfileStructA
CopyFileExW
TlsGetValue
GetDriveTypeW
CommConfigDialogA
GetNumberOfConsoleInputEvents
BuildCommDCBAndTimeoutsA
MapUserPhysicalPages
FreeLibrary
CallNamedPipeA
_lwrite
InterlockedDecrement
SetEnvironmentVariableW
CreateDirectoryW
GetProfileSectionA
WaitForSingleObject
WriteConsoleInputA
SetComputerNameW
SetVolumeMountPointW
GetComputerNameW
FreeEnvironmentStringsA
GetModuleHandleW
LocalFlags
GetConsoleTitleA
ReadConsoleW
WriteFile
EnumTimeFormatsW
CreateDirectoryExW
GetPriorityClass
GlobalAlloc
AddRefActCtx
LoadLibraryW
GetConsoleMode
_hread
GetPrivateProfileStructW
GetVersionExW
GetComputerNameExA
Beep
GetBinaryTypeA
WritePrivateProfileSectionW
GetAtomNameW
GetModuleFileNameW
CompareStringW
lstrlenW
HeapReAlloc
GlobalUnlock
LCMapStringA
VerifyVersionInfoW
SetThreadLocale
FillConsoleOutputCharacterW
IsDBCSLeadByteEx
GetProcAddress
CreateNamedPipeA
CopyFileA
VerLanguageNameW
GetTempFileNameA
GetPrivateProfileStringA
OpenWaitableTimerA
OpenMutexA
OpenWaitableTimerW
SetCalendarInfoW
IsWow64Process
CreateFileMappingW
IsSystemResumeAutomatic
SetConsoleOutputCP
AddAtomW
SetCurrentDirectoryW
QueryDosDeviceW
GetCommMask
EnumResourceTypesW
WTSGetActiveConsoleSessionId
GetThreadPriority
FindNextFileW
BuildCommDCBA
GetCurrentDirectoryA
CompareStringA
GetConsoleCursorInfo
ScrollConsoleScreenBufferA
_lopen
OpenSemaphoreW
TlsAlloc
DeleteTimerQueueTimer
ReadConsoleOutputCharacterW
InterlockedPushEntrySList
TlsFree
CommConfigDialogW
GetVolumeInformationW
CloseHandle
CreateFileW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetConsoleTitleA
GetVolumeNameForVolumeMountPointA
InterlockedIncrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
WideCharToMultiByte
HeapValidate
IsBadReadPtr
DeleteFileA
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringW
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetACP
GetOEMCP
IsValidCodePage
TlsSetValue
GetCurrentThreadId
SetLastError
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileType
GetConsoleCP
HeapAlloc
GetModuleFileNameA
HeapSize
HeapQueryInformation
HeapFree
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetLocaleInfoW
IsProcessorFeaturePresent
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
user32
GetCursorInfo
GetListBoxInfo
GetMessageTime
GetMenuBarInfo
advapi32
InitiateSystemShutdownW
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ