Static task
static1
Behavioral task
behavioral1
Sample
2509f63bce8b4bf3889dc28f7d6efb30.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2509f63bce8b4bf3889dc28f7d6efb30.exe
Resource
win10v2004-20231215-en
General
-
Target
2509f63bce8b4bf3889dc28f7d6efb30
-
Size
300KB
-
MD5
2509f63bce8b4bf3889dc28f7d6efb30
-
SHA1
ee603917dbbd232f7dd039f022efa42de9a6319e
-
SHA256
8632d12c1f80d9b9cdb50104311025ff06eade3f33deb748f616b39035f68ad4
-
SHA512
8aec745fbb44ae038aec3fc9d06d3ebe1aa362a9a353d76ede4f2d1d600875ba7163bca2645341268c8beb4e946c45b4052e55c326b1f6171a3e976462395cb4
-
SSDEEP
6144:7bM/xkd5kakutGbvqIBPnzH4k1B45DcK7c7KVZ7nePpX3d3ys0PCVjp1p1:7bM6WZuQbvqIB/rtzmoH7KVYPF3NyrCV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2509f63bce8b4bf3889dc28f7d6efb30
Files
-
2509f63bce8b4bf3889dc28f7d6efb30.exe windows:4 windows x86 arch:x86
ea04dd41ebfb2f49d370c457f6c96a11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
lstrlenW
VirtualQuery
GetEnvironmentStringsW
GlobalUnlock
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
WaitForMultipleObjects
DuplicateHandle
RemoveDirectoryA
FindNextFileA
CreateFileMappingA
CompareStringA
InterlockedIncrement
lstrcpyA
GetCurrentThreadId
FindNextFileW
lstrcmpA
WriteFile
CompareStringW
GetProcessHeap
GetProcAddress
GetFullPathNameA
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetExitCodeProcess
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
GetCurrentThread
GetVersion
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
TlsGetValue
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
SetStdHandle
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeA
GetCPInfo
GetLocaleInfoW
FreeEnvironmentStringsW
LoadLibraryExW
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetStdHandle
RaiseException
MapViewOfFile
TlsFree
SetFilePointer
ReadFile
FindFirstFileA
CloseHandle
GetACP
GetModuleHandleW
GetDiskFreeSpaceA
SizeofResource
IsValidCodePage
HeapCreate
FindResourceW
VirtualFree
Sleep
WriteConsoleW
VirtualAlloc
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
oleaut32
SysStringLen
SysAllocString
SysFreeString
user32
IsWindowEnabled
TranslateMessage
PeekMessageA
EnableWindow
SetCapture
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
GetKeyState
GetClientRect
ReleaseDC
GetCursorPos
GetDC
LoadStringA
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
GetDesktopWindow
SetWindowTextA
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
SendMessageA
DrawTextA
SetCursor
EnableMenuItem
RegisterClassA
CreateWindowExA
GetWindowLongA
FillRect
DispatchMessageA
PtInRect
SetFocus
BeginPaint
SetTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
EndDialog
CheckMenuItem
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
EndPaint
TrackPopupMenu
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
DeleteDC
SetTextColor
CreateCompatibleDC
SetBkMode
SelectObject
advapi32
RegDeleteKeyA
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW
RegDeleteValueA
msvcrt
_strcmpi
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
exit
_exit
free
_cexit
_controlfp
_except_handler3
__set_app_type
Sections
.text Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ