Static task
static1
General
-
Target
BackpackBraceletTape.exe
-
Size
27.2MB
-
MD5
b9ca313900d9c0d31e9d7dedb53e4919
-
SHA1
4af7926b7cae10dd5c4285b6b54058f7978d48cf
-
SHA256
691aaef4a0f1633a9a5cbce624d7efd7aefdc13f9f4048834e7598a62bfb7a59
-
SHA512
8458a5a87ffb66f8b9eda5d4bac9d090120c1d16f1b0c228e328d905958572a955da0c2f93149a390a2ac710f07efd851c4310d45d973dc9ce0a5217c6d0212d
-
SSDEEP
393216:Us79XIuYkkxSb4jjlK1ZMqc2thqJZ5F94/10o5nBrSpL9Dd/8Bz92v85ymOT5AN7:PBtn1CPKqJp6/1nBaL950BY2y75a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BackpackBraceletTape.exe
Files
-
BackpackBraceletTape.exe.exe windows:6 windows x64 arch:x64
0cb536fd1ef88e3377c08b936397e951
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d11
D3D11CreateDeviceAndSwapChain
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
kernel32
FindFirstFileW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowRect
advapi32
CryptDestroyHash
shell32
SHGetFolderPathW
ole32
CoUninitialize
oleaut32
VariantClear
msvcp140
??1_Locinfo@std@@QEAA@XZ
iphlpapi
GetAdaptersInfo
mpr
WNetGetProviderNameW
shlwapi
ord215
userenv
UnloadUserProfile
ws2_32
sendto
imagehlp
ImageNtHeader
d3dcompiler_43
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmGetContext
wintrust
WinVerifyTrust
psapi
GetModuleInformation
normaliz
IdnToAscii
wldap32
ord217
crypt32
CertFreeCertificateContext
rpcrt4
UuidCreate
vcruntime140_1
__CxxFrameHandler4
vcruntime140
strchr
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-string-l1-1-0
_strdup
api-ms-win-crt-stdio-l1-1-0
fflush
api-ms-win-crt-math-l1-1-0
sqrt
api-ms-win-crt-runtime-l1-1-0
_get_narrow_winmain_command_line
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-filesystem-l1-1-0
_unlink
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-environment-l1-1-0
_dupenv_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: - Virtual size: 914KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.79q Size: - Virtual size: 16.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gkx Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Aps Size: 27.2MB - Virtual size: 27.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ