Static task
static1
Behavioral task
behavioral1
Sample
67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9.exe
Resource
win10v2004-20240226-en
General
-
Target
67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9
-
Size
1.0MB
-
MD5
705b3453d09c952753048faec7a0b40e
-
SHA1
a3440b33eb9b0a22d8441d26685d714f178d88b7
-
SHA256
67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9
-
SHA512
644bf7b6f7e4d221cacf92d8d35d041d60d4d6006ed80deb5892a3e66989a8a70b07c56a12c94e1a77e3f8f272a7d22cc23b856add3a4c432d399fe5fa3afb9c
-
SSDEEP
12288:omxBz/YxYdZn5mvXc4aVIesScHtRULH27TLR56waj3AjA:oMz/YxYdZn5mvVaVgVXv6wQw0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9
Files
-
67f67e92b0d0a8e257beabfca161312ab70630b4d9ee441cebfb82a5353379f9.exe windows:4 windows x86 arch:x86
eac6543527acc33e8231f8c09bd7ca28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
IsBadWritePtr
IsBadReadPtr
HeapValidate
RaiseException
TerminateProcess
GetCurrentProcess
DebugBreak
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
LCMapStringA
LCMapStringW
FlushFileBuffers
SetStdHandle
HeapAlloc
HeapReAlloc
VirtualAlloc
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 988KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ