Static task
static1
Behavioral task
behavioral1
Sample
2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90.exe
Resource
win10v2004-20240226-en
General
-
Target
2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90
-
Size
937KB
-
MD5
7724cb858b4ce54896b0b85742b193a6
-
SHA1
84353d43b8da1a0504063650b525ca587bf03913
-
SHA256
2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90
-
SHA512
5c4648eb1fcf0db4ba55d06c033f80dd4fa55ed83573e0acce65f8adcc62e379653b1eff076c9cb04347bed79742697c4b4dcbffdd71120ba9db33bb0de34f6d
-
SSDEEP
24576:Zuq2DJaTviD69xqlamjrpJvm7Anf7oYTWTg:gTda7KmkdrfOAnDjCTg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90
Files
-
2348dd737da8ebd803029185e26681b1530ba3d47edb5261df0494ae36968e90.exe windows:6 windows x64 arch:x64
9505b56bc43c4765bc8f6b861d39a0c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
GetSystemDefaultLangID
Sleep
AddVectoredExceptionHandler
GetProcAddress
GetModuleHandleW
WriteConsoleW
CreateFileW
HeapSize
GetProcessHeap
EnumTimeFormatsEx
GlobalMemoryStatusEx
RemoveVectoredExceptionHandler
SetStdHandle
SetEnvironmentVariableW
WideCharToMultiByte
GetCurrentThreadId
CloseHandle
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
WriteFile
GetModuleFileNameW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
user32
EnumWindows
GetCursorPos
advapi32
CryptGenRandom
CryptAcquireContextW
Sections
.text Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ