Static task
static1
Behavioral task
behavioral1
Sample
042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190.exe
Resource
win10v2004-20240226-en
General
-
Target
042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190
-
Size
509KB
-
MD5
81a8a85c12f0a174d1026a476d34581f
-
SHA1
ad9ba3392e03ca8a1e3d14a51ff03291d04d0d93
-
SHA256
042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190
-
SHA512
88f661926cb5b65e7b232c05e9d818c3aa27d7ee9bf7a5cbe38aa9d77cc3bc724dad3cc4d250d0261beec72f00788846c4307c0394a729db4d25c8d2c2894d71
-
SSDEEP
12288:eB+IjTW3biPEe8qSesh0UdNzx6zbZj4T9nF4:eB+QWmPEehSesh0+x6zblInF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190
Files
-
042b62ed916dde3b91ae5bc712274d1fcd6eb805b29b1ec64f48f112714e3190.exe windows:5 windows x86 arch:x86
9fb330953e104a235ddadf6af2c47bd0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
WideCharToMultiByte
LocalFileTimeToFileTime
EncodePointer
DecodePointer
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedDecrement
GetCPInfo
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
HeapSize
RaiseException
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
WriteFile
GetModuleFileNameW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetLocaleInfoW
CloseHandle
InterlockedExchange
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetStdHandle
WriteConsoleW
CreateFileA
CreateFileW
SetEndOfFile
GetProcessHeap
InterlockedCompareExchange
InitializeCriticalSection
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ