Static task
static1
Behavioral task
behavioral1
Sample
dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1.exe
Resource
win10v2004-20231215-en
General
-
Target
dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1
-
Size
905KB
-
MD5
5ee4eb06ffb51f928ad3aceba5f51051
-
SHA1
8f805f382d97a05ce99d41625a1a33d64d8eebc9
-
SHA256
dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1
-
SHA512
d9da92fa4196099547690a2311e7ec798f1997d4eb1d63097ff98c57a4e52710910e4b5c64e4ee2924462618a0177db65e0c822c049162b274da8541182e4884
-
SSDEEP
24576:oeIiiKkQRKVjq2ygy/lNe/IfDjah3k9YhxnHBU1TVwIH:RINQRKVjq2ygy/lY6SkGTU1TeIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1
Files
-
dae055eb30aeac79596194e575b48465f9925f7710b2e5719eaf2914dac9bca1.exe windows:6 windows x86 arch:x86
edf54fef95076af673790b9a321ecac2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapSize
HeapReAlloc
CreateDirectoryW
GetFileAttributesExW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
WriteConsoleW
FlushFileBuffers
CloseHandle
CreateFileA
WriteFile
GetProcAddress
LoadLibraryW
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
ExitProcess
LoadResource
FindResourceExW
LockResource
EnumResourceLanguagesW
EnumResourceNamesW
SizeofResource
ExpandEnvironmentStringsW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
GetLocaleInfoEx
LCMapStringEx
CompareStringEx
GetCPInfo
GetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
ReadFile
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
user32
GetDC
SetWindowPos
MonitorFromWindow
CreateWindowExW
SendMessageW
RegisterClassW
DefWindowProcW
LoadCursorW
SetCursor
SetWindowLongW
GetClientRect
PostQuitMessage
ReleaseDC
BeginPaint
EndPaint
MessageBoxA
MessageBoxW
LoadStringW
ShowWindow
GetWindowLongW
SetLayeredWindowAttributes
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
SelectObject
GetCharWidth32W
GetStockObject
TextOutW
SetTextColor
SetBkMode
CreatePen
GetObjectW
DeleteObject
CreateSolidBrush
CreateFontIndirectW
RoundRect
advapi32
RegGetValueW
RegCloseKey
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysFreeString
SysAllocString
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ