Static task
static1
Behavioral task
behavioral1
Sample
1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89.exe
Resource
win10v2004-20240226-en
General
-
Target
1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89
-
Size
428KB
-
MD5
688e83410b1f870a4519f6c6ec0501a7
-
SHA1
14b59362e6911ec127f6bec88ec1ae7d9e445d92
-
SHA256
1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89
-
SHA512
16322e73049e865f41211a305dd11e42580e6475cf152f5b859b1ee518d5cf68a567597aebf21891352f60e4f47ee93dca2d60c5841312a5447c037901f4ba9a
-
SSDEEP
12288:oyCDzclS2UCVHHQ/8ZpDrN9Ucgmq7/jVyOj:x/lS2U4FrBGcgZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89
Files
-
1c773c33c0f6179b2be4bc6900e6cc51c7c347ff1ed8a6b01f017af04aa7bd89.exe windows:5 windows x86 arch:x86
1bfb9e30602d999465ce79b11a35f99e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
HeapCompact
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterA
HeapAlloc
CreateJobObjectW
HeapFree
WaitForSingleObject
CreateHardLinkA
GlobalAlloc
WideCharToMultiByte
GetLocaleInfoW
DnsHostnameToComputerNameW
GetFileAttributesW
GetModuleFileNameW
FindNextVolumeMountPointW
InterlockedExchange
GetStdHandle
FreeLibraryAndExitThread
GetLastError
GetConsoleDisplayMode
BuildCommDCBW
GetNumaHighestNodeNumber
GetAtomNameA
LoadLibraryA
UnhandledExceptionFilter
GetFileType
FindAtomA
ConvertDefaultLocale
VirtualProtect
GetCurrentDirectoryA
ScrollConsoleScreenBufferA
FileTimeToLocalFileTime
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapCreate
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 349KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ