Static task
static1
Behavioral task
behavioral1
Sample
bac60e76b3e318fc7415ae2d87b7c9c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bac60e76b3e318fc7415ae2d87b7c9c9.exe
Resource
win10v2004-20240226-en
General
-
Target
bac60e76b3e318fc7415ae2d87b7c9c9
-
Size
27KB
-
MD5
bac60e76b3e318fc7415ae2d87b7c9c9
-
SHA1
c899d34a948c0fd00eb04ab23cf3c37b91b4ac19
-
SHA256
affbce370f5f1bcda14d116fcba64eb1e6a11d6e0b8ac2447a099cdcf899b79d
-
SHA512
b65f5cbc36f03e23bffcfb0102f36938317af2425f8e791cfae99ee8e375a13a690accf7703d6b1a573d791c117592d7cddda4b21450b354e57a8e65c491e888
-
SSDEEP
768:tw45/+uZGxcYKkvZqMidXu9wSrQNjT2c//J/:mtFZqMcXu9wBNjic/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac60e76b3e318fc7415ae2d87b7c9c9
Files
-
bac60e76b3e318fc7415ae2d87b7c9c9.exe windows:4 windows x86 arch:x86
364a18a76669c98c0a73fc76d4d1cd06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCatBuffW
user32
wsprintfA
RegisterWindowMessageA
DispatchMessageA
CharNextA
CallMsgFilterW
TranslateMessage
PostThreadMessageA
kernel32
FormatMessageW
DisableThreadLibraryCalls
LocalFree
SetEndOfFile
GetTempPathA
VirtualQuery
SetFileAttributesA
GetSystemInfo
lstrcatA
GetCurrentThreadId
LoadLibraryA
GlobalReAlloc
CompareFileTime
GetCurrentProcess
InterlockedIncrement
WideCharToMultiByte
Sleep
SystemTimeToFileTime
lstrlenA
CreateFileW
GetACP
LoadLibraryExA
GetFileSize
IsDBCSLeadByte
IsDBCSLeadByteEx
GetTempFileNameA
GetDateFormatA
GetUserDefaultLCID
DeleteCriticalSection
lstrcmpiA
IsBadReadPtr
lstrcpyA
GetStringTypeW
GetCurrentThread
TlsSetValue
GlobalUnlock
FileTimeToSystemTime
FindFirstFileA
GetProcAddress
FlushFileBuffers
TlsGetValue
GetVersionExA
GetTimeZoneInformation
GetSystemTimeAsFileTime
MultiByteToWideChar
lstrlenW
VirtualFree
IsValidCodePage
TerminateProcess
VirtualAlloc
GetLocaleInfoA
GetShortPathNameA
GetTimeFormatA
VirtualProtect
UnhandledExceptionFilter
FindClose
TlsFree
GlobalLock
GetTimeFormatW
ExitProcess
GetLocaleInfoW
GetThreadLocale
lstrcpynA
InterlockedExchange
FormatMessageA
GetOverlappedResult
GlobalFree
GetSystemDefaultLangID
CloseHandle
SetFilePointer
IsBadWritePtr
GetSystemTime
CreateFileA
GlobalAlloc
LoadResource
FindNextFileA
CopyFileA
GetModuleHandleA
GetFileTime
GetLastError
GetModuleFileNameA
InitializeCriticalSection
ReadFile
HeapAlloc
QueryPerformanceCounter
GetTickCount
TlsAlloc
EnterCriticalSection
SetUnhandledExceptionFilter
GetDateFormatW
InterlockedDecrement
ResetEvent
GetCPInfo
FindResourceA
WriteFile
HeapFree
GetCurrentProcessId
CreateEventA
WaitForSingleObject
HeapCreate
GlobalHandle
SetEvent
SizeofResource
LeaveCriticalSection
FreeLibrary
cfgmgr32
CM_Get_Version_Ex
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ