Static task
static1
Behavioral task
behavioral1
Sample
d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d.exe
Resource
win10v2004-20231215-en
General
-
Target
d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d
-
Size
373KB
-
MD5
495ec7cbb6cae5afe73f7cecbdd9a36f
-
SHA1
38ff40b11ee4824873bb46b715ae92632127ce2e
-
SHA256
d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d
-
SHA512
0aa9a764e851a7abe171b612a29e4b48a4d3431c25cd3c4cc7a097c51262cac61a9f9a07762ca0f10b5f5e0a28caf3b0ed05fd7f8582a8b03b1feb4bbfe016ea
-
SSDEEP
6144:J0tmWXSbO1mP1xqDxcWrJjusAmCjO0fNg4BS59FuqU:J0tmNb+mLc1uRm4ME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d
Files
-
d27f6af18ffe7f3a36326707a2633cf4abbfaba151ef118f747e7c3a317ea75d.exe windows:6 windows x64 arch:x64
299a958cc3ab9ff9641c86b34f45977e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shlwapi
StrFormatKBSizeA
comctl32
PropertySheetA
kernel32
VerifyVersionInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
FindResourceA
ReadConsoleInputW
SetConsoleMode
CreateFileW
WideCharToMultiByte
ReadFile
GetConsoleMode
LoadLibraryExA
FlushFileBuffers
LCMapStringW
FormatMessageA
MulDiv
LoadLibraryA
SizeofResource
LockResource
LoadResource
FreeLibrary
GetPhysicallyInstalledSystemMemory
GetTickCount
GetSystemInfo
GetCurrentProcess
DeviceIoControl
SetFileAttributesA
DeleteFileA
GetEnvironmentVariableA
GetLastError
VerSetConditionMask
CloseHandle
SetLastError
CreateFileA
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetCommandLineW
GetStdHandle
GetModuleFileNameW
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
WriteConsoleW
GetConsoleOutputCP
GetVersionExA
SetEndOfFile
ReadConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
SetStdHandle
ExitProcess
GetModuleHandleExW
GetConsoleCP
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
WriteFile
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
user32
InvalidateRect
ReleaseDC
GetDC
DrawTextA
KillTimer
SetTimer
SetFocus
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
ShowWindow
PostQuitMessage
PostMessageA
FillRect
wsprintfA
LoadCursorA
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
SendMessageA
MessageBoxA
RegisterWindowMessageA
gdi32
SetTextColor
SetBkMode
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
EndPage
StartPage
EndDoc
StartDocA
SetMapMode
GetDeviceCaps
comdlg32
PrintDlgA
ChooseColorA
advapi32
ControlService
RegGetValueA
RegFlushKey
RegDeleteValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
StartServiceA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
CloseServiceHandle
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
shell32
CommandLineToArgvW
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ