Static task
static1
Behavioral task
behavioral1
Sample
74e2f80daf97d12101a4212622fbb660.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
74e2f80daf97d12101a4212622fbb660.exe
Resource
win10v2004-20231215-en
General
-
Target
74e2f80daf97d12101a4212622fbb660
-
Size
13.0MB
-
MD5
74e2f80daf97d12101a4212622fbb660
-
SHA1
5f3aaa2f49e5298cf8c43e23e2a92964342878ac
-
SHA256
5159634c29db5f929d576ab3006f4fe0288e17c20212d27d8ceb22ab5731fe03
-
SHA512
e5c6c8765661421a7a26022afc3a3f01cc1ec62c9c80704719e6c0414bac64adc5b739ec6a28901af46d3a150a8f3259270178f41862de776220e92336653b6f
-
SSDEEP
49152:I7Jggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggb:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74e2f80daf97d12101a4212622fbb660
Files
-
74e2f80daf97d12101a4212622fbb660.exe windows:5 windows x86 arch:x86
eb2409931607875e59e6f5b3470fa923
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetProcessTimes
SetHandleCount
TlsSetValue
SetFileShortNameW
GetFirmwareEnvironmentVariableA
GetThreadSelectorEntry
GetCalendarInfoW
FormatMessageW
GetFileAttributesA
GetComputerNameExA
WritePrivateProfileStructW
GetTimeFormatW
FindNextVolumeW
SetTimeZoneInformation
LocalReAlloc
IsBadWritePtr
GetGeoInfoA
CreateActCtxA
GetShortPathNameA
GetConsoleOutputCP
GetFileSizeEx
InterlockedFlushSList
GetCurrentDirectoryW
GetLongPathNameW
GetThreadLocale
IsBadHugeWritePtr
BackupWrite
DefineDosDeviceW
CreateTimerQueueTimer
SetComputerNameA
EnterCriticalSection
EnumTimeFormatsA
PrepareTape
GetAtomNameA
LoadLibraryA
OpenMutexA
CreateSemaphoreW
LocalAlloc
GetExitCodeThread
LockResource
AddAtomW
OpenEventA
HeapLock
GetCommMask
OpenJobObjectW
EnumDateFormatsA
lstrcmpiW
GetModuleHandleA
CancelTimerQueueTimer
VirtualProtect
OpenEventW
OutputDebugStringA
SetProcessShutdownParameters
_lopen
CloseHandle
GetVolumeNameForVolumeMountPointW
lstrcpyA
CreateFileW
ReadConsoleW
ReadFile
WriteConsoleW
OutputDebugStringW
GetCompressedFileSizeW
SetFileTime
FormatMessageA
GetPrivateProfileStringW
SetThreadUILanguage
FreeEnvironmentStringsA
GetSystemDefaultLCID
GetFullPathNameW
LockFile
UpdateResourceA
LoadResource
FindResourceExW
SetEndOfFile
GetDriveTypeW
GetConsoleAliasExesA
CopyFileExW
WritePrivateProfileStructA
lstrlenA
HeapCompact
CreateTimerQueue
DisableThreadLibraryCalls
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
LeaveCriticalSection
DeleteCriticalSection
IsProcessorFeaturePresent
GetLastError
HeapFree
GetCommandLineW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetProcessHeap
GetStdHandle
GetFileType
GetCurrentThreadId
HeapSize
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryExW
user32
SetClassLongA
GetWindowWord
GetMonitorInfoA
EnumClipboardFormats
advapi32
LookupPrivilegeNameA
AccessCheckByTypeResultListAndAuditAlarmW
ConvertToAutoInheritPrivateObjectSecurity
RegConnectRegistryA
GetUserNameA
QueryServiceConfigA
RegSaveKeyA
RegOpenKeyExA
GetNumberOfEventLogRecords
ObjectDeleteAuditAlarmW
RegQueryValueExW
EqualSid
RegisterServiceCtrlHandlerA
EnumServicesStatusA
ObjectPrivilegeAuditAlarmA
SetThreadToken
LookupPrivilegeNameW
GetSidIdentifierAuthority
InitiateSystemShutdownA
CreateServiceW
winhttp
WinHttpConnect
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpSetOption
Sections
.text Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12.7MB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ