Static task
static1
Behavioral task
behavioral1
Sample
2be30a84cd175882f164dc5b77859e33.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2be30a84cd175882f164dc5b77859e33.exe
Resource
win10v2004-20231215-en
General
-
Target
2be30a84cd175882f164dc5b77859e33
-
Size
11.0MB
-
MD5
2be30a84cd175882f164dc5b77859e33
-
SHA1
2cb3e61e7031d795cbc8874863a016fc610d70d9
-
SHA256
9dc0b3d82561f8acb6909afc37e4ad0a6e03e92eba1a2557f027b220e1631618
-
SHA512
8fff7437d457550db624bbf3b93d71b65bfc02761682cf15e1326f918dc2a00f42637b6e245937a051156f3643dd0d43e609a4ac0255e63954fc8a40c0f4e6f4
-
SSDEEP
24576:o2oZoDdVwdiCxGdddddddddddddddddddddddddddddddddddddddddddddddddz:zVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be30a84cd175882f164dc5b77859e33
Files
-
2be30a84cd175882f164dc5b77859e33.exe windows:5 windows x86 arch:x86
c67dd287a812ad8c126b1794f7757cf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetComputerNameA
CreateMutexW
SearchPathW
WriteConsoleInputW
WritePrivateProfileStructA
GetConsoleAliasesLengthW
CopyFileExW
TlsGetValue
SetLocalTime
CommConfigDialogA
GetDefaultCommConfigW
FindResourceExW
GetProcessIoCounters
FreeLibrary
CallNamedPipeA
SetConsoleTextAttribute
GetCommState
InterlockedDecrement
ZombifyActCtx
ScrollConsoleScreenBufferW
GetNamedPipeHandleStateA
GlobalLock
SetComputerNameW
CreateDirectoryExA
GetModuleHandleW
GetCommConfig
SetProcessPriorityBoost
GetSystemDirectoryW
LoadLibraryW
GetConsoleMode
SizeofResource
GetCalendarInfoA
ReadFileScatter
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryA
GetSystemTimeAdjustment
InterlockedPopEntrySList
GlobalFlags
SetConsoleCursorPosition
GetBinaryTypeA
IsDBCSLeadByte
ReadFile
GetBinaryTypeW
GetOverlappedResult
CompareStringW
ExitThread
lstrlenW
LCMapStringA
VerifyVersionInfoW
CreateDirectoryA
GetProfileIntA
GetFileSizeEx
SetCurrentDirectoryA
SetThreadLocale
GetCPInfoExW
OpenMutexW
GetCurrentDirectoryW
ReadConsoleOutputCharacterA
GetProcessHeaps
SetVolumeLabelW
WriteProfileSectionA
SetStdHandle
FreeUserPhysicalPages
GetPrivateProfileStringA
GetLocalTime
GetAtomNameA
LoadLibraryA
LocalAlloc
GetTapeParameters
WTSGetActiveConsoleSessionId
SetConsoleTitleW
GetProcessShutdownParameters
FreeEnvironmentStringsW
RequestWakeupLatency
VirtualProtect
CompareStringA
GetConsoleCursorInfo
GetVersionExA
FindAtomW
GetWindowsDirectoryW
FileTimeToLocalFileTime
GetVolumeNameForVolumeMountPointW
DeleteFileW
FindActCtxSectionStringW
GetProfileSectionW
CommConfigDialogW
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
GetCPInfo
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
GetLastError
LCMapStringW
GetFileType
WriteFile
GetConsoleCP
GetProcAddress
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetStringTypeA
GetStringTypeW
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
GetModuleHandleA
GetLocaleInfoW
CreateFileA
CloseHandle
user32
GetCursorInfo
GetMessageTime
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10.7MB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ