Static task
static1
Behavioral task
behavioral1
Sample
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead.exe
Resource
win10v2004-20231222-en
General
-
Target
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
-
Size
203KB
-
MD5
8677a42b0c081790accfba5cadd0e065
-
SHA1
915546139b571c9c3857aa1641c6ce83713cec63
-
SHA256
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
-
SHA512
8c341b952e1af5c2a0fcf1586062cc0cace8b6c347f85bf5452515ae4bf4351a8b757c708a78b36d49583afce2a93f9213a5ca7518edbc0ca19274b671795127
-
SSDEEP
3072:GUHcLIUjhmhX3MYYIHYT1vfkDmP6xjFK0jhBgsvNrRcJcN:GU8LXmV8YhHYGd8s7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead
Files
-
9ba00646bb66594c56c1af60ab38060c55f272a4e1e848c6941f5d6c53a02ead.exe windows:5 windows x86 arch:x86
6f1fc954688432f7f49adfc545cb497d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterW
GetLocaleInfoA
WriteConsoleOutputCharacterA
InterlockedDecrement
QueryDosDeviceA
InterlockedCompareExchange
SetComputerNameW
GetComputerNameW
GetModuleHandleW
GetTickCount
GetCommConfig
VirtualFree
GetConsoleAliasesLengthA
GlobalFindAtomA
LoadLibraryW
SetConsoleMode
GetConsoleAliasW
GetWriteWatch
WriteConsoleW
FindFirstChangeNotificationW
SetThreadPriority
GetStartupInfoA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
SetFileAttributesA
InterlockedExchangeAdd
LocalAlloc
CreateHardLinkW
TransmitCommChar
AddAtomW
FindFirstVolumeMountPointA
IsDebuggerPresent
GetStringTypeW
GetCurrentProcessId
DeleteFileA
lstrcpyA
GetNativeSystemInfo
SetComputerNameExW
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
HeapFree
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
HeapSize
gdi32
GetCharABCWidthsFloatW
WidenPath
shell32
ShellAboutW
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ