Static task
static1
Behavioral task
behavioral1
Sample
bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7.exe
Resource
win10-20240221-en
General
-
Target
bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7
-
Size
169KB
-
MD5
d7876ea17cd7db5202935127c4d955aa
-
SHA1
5f6317e8fdf31a0cad322a9febd8d10255231980
-
SHA256
bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7
-
SHA512
3881a1dfacfe47a47559bac8b1add9679def1bd0ddcb5783855b6c883d220ca9cf143967b1dfcee0219017e8c7ea0f6fb88486069f91ae49428985909ba71be4
-
SSDEEP
3072:+xfHanKokx/CJvMsZ4JDDrGbz80JL6BQlCRJ:2fSKooCRMsClt006l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7
Files
-
bec442ea6db20ffc73c69220ae12fcfca036bda5667c0aedec4560998d89c7f7.exe windows:5 windows x86 arch:x86
274ac5cec143bcfe1f9479fdb6bea3bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterA
HeapAlloc
ScrollConsoleScreenBufferW
CreateHardLinkA
GlobalAlloc
WideCharToMultiByte
LoadLibraryW
GetLocaleInfoW
GetFileAttributesA
DnsHostnameToComputerNameW
HeapValidate
GetAtomNameW
GetModuleFileNameW
FindNextVolumeMountPointW
CreateJobObjectA
InterlockedExchange
GetStdHandle
GetLastError
GetThreadLocale
GetProcessHeaps
GetConsoleDisplayMode
DisableThreadLibraryCalls
BuildCommDCBW
GetNumaHighestNodeNumber
LoadLibraryA
UnhandledExceptionFilter
FindAtomA
CreatePipe
VirtualProtect
GetCurrentDirectoryA
ReleaseMutex
FileTimeToLocalFileTime
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
HeapCreate
HeapFree
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ