Static task
static1
Behavioral task
behavioral1
Sample
709aeebaf05fbde308ee29dfeade658b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
709aeebaf05fbde308ee29dfeade658b.exe
Resource
win10v2004-20231215-en
General
-
Target
709aeebaf05fbde308ee29dfeade658b
-
Size
11.9MB
-
MD5
709aeebaf05fbde308ee29dfeade658b
-
SHA1
cf5f760457ab894dfefc9adbe2dd4d0888f5e1e1
-
SHA256
ec6cb6839b9f41de8bf5c13b3fc33f2dbe6aff2f3aeaf15710e6103178163626
-
SHA512
315066aec9d179cc9eb46da5e26dbca82289b9457d9ee0b5c37c93516e12443c94c9da7550a2e104d497544b511c02ed40718b8d7aead9f055b744d6f8c20fe7
-
SSDEEP
24576:DCKmbpaVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVt:xI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 709aeebaf05fbde308ee29dfeade658b
Files
-
709aeebaf05fbde308ee29dfeade658b.exe windows:5 windows x86 arch:x86
a9846ce1b092483e13eb4ec129769170
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
ResumeThread
ClearCommBreak
GetSystemRegistryQuota
GetSystemTimes
GetTickCount
GetSystemTimeAdjustment
lstrcmpA
lstrcatW
_lcreat
CreateSemaphoreW
OpenFileMappingA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetCommandLineA
ExpandEnvironmentStringsA
GetFirmwareEnvironmentVariableA
SwitchToThread
EnumResourceLanguagesA
FindAtomW
GetTempPathW
FindFirstFileExW
MoveFileExW
CreateHardLinkW
IsBadStringPtrA
OpenJobObjectA
FindNextVolumeMountPointW
DeleteVolumeMountPointW
ZombifyActCtx
GetNumaHighestNodeNumber
EnumDateFormatsW
GetSystemDefaultLangID
GetCurrentConsoleFont
WriteConsoleA
CloseHandle
WriteConsoleW
HeapUnlock
GlobalAlloc
GetProcAddress
SetFirmwareEnvironmentVariableA
InterlockedIncrement
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineW
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW
user32
GetMonitorInfoW
advapi32
RegSetValueExW
PrivilegedServiceAuditAlarmA
ReportEventA
QueryServiceLockStatusW
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 49.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11.6MB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ