Static task
static1
Behavioral task
behavioral1
Sample
72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3.exe
Resource
win10v2004-20231215-en
General
-
Target
72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3
-
Size
545KB
-
MD5
1861d44b43e43869e993c74c85a7eeb1
-
SHA1
38185ec6607b12a5a1fe587e731a65d3c7f4f1f9
-
SHA256
72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3
-
SHA512
f03835163557b7a49f1a3c17b84a2003eac5ca50d732a3e04361d7d069936ff183c4bee06a7da7f7f69c7d89a3863e3684f3b3fac7587ffa9ecd8044ee29b258
-
SSDEEP
12288:9pG2oQg0bZV/pLxOK4BklFaNwwdKLuEhNH:986VV/hxOpklYQXhN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3
Files
-
72bc94e6cbee09c7cc9be3f0674260361f619cd860a755c202f3d882c6013ee3.exe windows:5 windows x86 arch:x86
e24eadc2421291c424813ec982f9144a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
webview
_WebViewStartup@16
shlwapi
wnsprintfW
SHGetValueW
SHSetValueA
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
iphlpapi
GetAdaptersInfo
wininet
InternetGetConnectedState
urlmon
URLDownloadToCacheFileW
URLDownloadToFileW
netapi32
Netbios
kernel32
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
SizeofResource
VirtualProtect
HeapFree
GetModuleFileNameW
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
GetProcAddress
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
IsBadReadPtr
SetUnhandledExceptionFilter
DeleteFileW
CloseHandle
GetCurrentProcess
lstrlenW
lstrcpynW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
lstrlenA
RtlUnwind
InterlockedPushEntrySList
DuplicateHandle
VirtualFree
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
GetACP
GetCurrentThread
GetFileType
LCMapStringW
GetStringTypeW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
CreateFileW
DeviceIoControl
lstrcmpA
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
SetLastError
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
InterlockedFlushSList
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
Sleep
GetTickCount
SwitchToThread
TryEnterCriticalSection
advapi32
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ