Static task
static1
Behavioral task
behavioral1
Sample
0177a74beec311cfb2f24b504fade989.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0177a74beec311cfb2f24b504fade989.exe
Resource
win10v2004-20231215-en
General
-
Target
0177a74beec311cfb2f24b504fade989
-
Size
607KB
-
MD5
0177a74beec311cfb2f24b504fade989
-
SHA1
370482bb64aa3e923dd06441f66b4704ee75e97a
-
SHA256
77310e7409952072aaa748f466dc7bd4ec4391b2da3d957e418a1614925673fd
-
SHA512
b6dd04ac3e8d00a0c6caeae20bb432f59069bc8d00c1ba0270c55a5bc52cb2c86586e07ed74592ed87c4e982840e8c195c370e166dab808cafa4d4bda2aeaa2c
-
SSDEEP
12288:C3+hileCdItBi/XU6pfhChmmSmQHq+2vFdL74YcFVsXoA8bZ:JhioCdIzi/XdHmZ+2Ts/FVsh8b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0177a74beec311cfb2f24b504fade989
Files
-
0177a74beec311cfb2f24b504fade989.exe windows:4 windows x86 arch:x86
bd8170baa5ee6cd24e5f042fdbc0949b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_GetImageCount
ImageList_LoadImageW
ImageList_DrawEx
kernel32
GlobalCompact
GetEnvironmentStringsW
EnumSystemLocalesW
GetModuleHandleW
GetStdHandle
EnterCriticalSection
CopyFileExA
WideCharToMultiByte
GetTickCount
MoveFileA
GetConsoleCP
CreateMutexA
CloseHandle
ExitProcess
IsValidCodePage
MultiByteToWideChar
SetLastError
PulseEvent
VirtualProtect
VirtualQuery
LocalFileTimeToFileTime
SetEvent
GetDateFormatA
OpenWaitableTimerW
GetDateFormatW
GetUserDefaultLCID
SetHandleCount
GetCommandLineA
DeleteAtom
FlushViewOfFile
SetUnhandledExceptionFilter
SetEnvironmentVariableA
FreeLibraryAndExitThread
QueryPerformanceCounter
CopyFileA
WriteConsoleW
LockResource
TlsGetValue
FreeEnvironmentStringsA
DeleteCriticalSection
InterlockedIncrement
Sleep
TlsFree
GetStringTypeW
GetStartupInfoA
OpenMutexA
LoadLibraryA
GetModuleFileNameA
GetCalendarInfoW
HeapAlloc
TlsSetValue
VirtualFree
FlushFileBuffers
SetConsoleCtrlHandler
GetCurrentProcessId
GetProcAddress
SetConsoleWindowInfo
RtlUnwind
GetComputerNameA
lstrcat
OpenSemaphoreA
WaitForSingleObjectEx
lstrcatW
IsValidLocale
GetTimeFormatA
SetPriorityClass
WaitForDebugEvent
GetLongPathNameW
GetCPInfo
UnhandledExceptionFilter
HeapCreate
GetModuleHandleA
GetSystemTimeAsFileTime
SetStdHandle
InitializeCriticalSectionAndSpinCount
LCMapStringA
HeapSize
GetLastError
ReadFile
FileTimeToLocalFileTime
GetWindowsDirectoryA
GetCurrentThreadId
LocalLock
LocalCompact
LeaveCriticalSection
GetOEMCP
WriteConsoleA
lstrcmpi
GetStringTypeA
HeapDestroy
SetFilePointer
EnumDateFormatsExA
GetCurrentThread
FreeLibrary
GetPriorityClass
HeapReAlloc
OpenEventW
EnumSystemLocalesA
VirtualAlloc
EnumResourceLanguagesW
FreeResource
TerminateProcess
CreateEventW
FillConsoleOutputAttribute
GetLocaleInfoW
CreateFileA
FreeEnvironmentStringsW
GetConsoleScreenBufferInfo
IsBadWritePtr
GetEnvironmentStrings
GetACP
TlsAlloc
GetConsoleOutputCP
OpenWaitableTimerA
GetTimeZoneInformation
WritePrivateProfileStringW
GetProfileSectionA
IsDebuggerPresent
GetAtomNameA
GetLocaleInfoA
GetProcessAffinityMask
GetVersionExA
UnlockFile
GetStartupInfoW
GlobalGetAtomNameA
OpenEventA
VirtualProtectEx
WriteProfileSectionW
InterlockedDecrement
WriteFile
lstrcpyW
CreateProcessW
ResumeThread
GetConsoleMode
GetCurrentDirectoryW
OpenProcess
CompareStringA
HeapFree
EnumSystemCodePagesA
WriteFileEx
OutputDebugStringA
SetEndOfFile
GetFileType
InterlockedExchange
CompareStringW
LCMapStringW
GlobalLock
GetCurrentProcess
CreateNamedPipeA
GetFileAttributesW
user32
EnumChildWindows
TranslateMessage
ValidateRect
EmptyClipboard
DefWindowProcA
DestroyWindow
TileChildWindows
LoadStringW
MessageBoxW
ChangeClipboardChain
EndPaint
SetSystemCursor
TranslateAccelerator
GetKeyboardLayoutList
MapVirtualKeyA
LoadMenuW
CallMsgFilterA
CreateWindowExA
ToAscii
BroadcastSystemMessageW
wvsprintfA
SetWindowTextA
SendMessageTimeoutA
DdeNameService
ScrollWindow
EnumDisplaySettingsExA
RegisterClassExA
LoadIconW
RegisterClassA
DdeCreateStringHandleW
AdjustWindowRect
ReplyMessage
ShowWindow
GetActiveWindow
wininet
InternetTimeToSystemTime
InternetSecurityProtocolToStringW
shell32
CommandLineToArgvW
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ