Static task
static1
Behavioral task
behavioral1
Sample
d42f0e8da28370f6b8c118cb4f35c6ca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d42f0e8da28370f6b8c118cb4f35c6ca.exe
Resource
win10v2004-20240226-en
General
-
Target
d42f0e8da28370f6b8c118cb4f35c6ca
-
Size
6.5MB
-
MD5
d42f0e8da28370f6b8c118cb4f35c6ca
-
SHA1
2718259c65e1e2098b37e95335e3015a8e9eda65
-
SHA256
324a729db0f89d49cf231b9409d9e983616e5403c93f2f06e4a546dd8717c1b2
-
SHA512
96ebaee5435c956b4872f47ed9e7c19144f293291752303621f0b198a3258fe52b4f65e11060b319e8b25a592582e9cd41a18a5cfa991dab01e43fce94cf9af7
-
SSDEEP
98304:/i9HG+BYoVGW2wNM+m+9dB6FtNCfBnM3AZx5Ar7lZZ6tj9bPDh/z:/VZRd+M3NC2QZfAbZ6vbPDtz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42f0e8da28370f6b8c118cb4f35c6ca
Files
-
d42f0e8da28370f6b8c118cb4f35c6ca.exe windows:6 windows x86 arch:x86
691fb7a46c9710fbb47e2f8eecaae1c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetStringTypeW
WriteConsoleW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetFilePointerEx
Sleep
GetCommandLineW
GetVersionExA
SetStdHandle
GetOverlappedResult
GlobalLock
GetCommState
TlsAlloc
GlobalFree
GetLastError
FlushFileBuffers
GetCommandLineA
GetTickCount
GetModuleHandleExW
GetEnvironmentStringsW
HeapAlloc
GetCurrentProcess
GetSystemDefaultLangID
GetConsoleMode
GetConsoleCP
EncodePointer
DecodePointer
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CloseHandle
user32
EndPaint
ScreenToClient
SetParent
SetPropA
UnregisterClassA
DrawStateW
CreatePopupMenu
SystemParametersInfoA
AdjustWindowRect
SetScrollInfo
DrawEdge
DrawFocusRect
GetWindowPlacement
SetWindowLongA
AppendMenuW
RedrawWindow
PostMessageA
BeginDeferWindowPos
EnableWindow
UpdateWindow
gdi32
PatBlt
GetTextExtentPoint32A
LineTo
CreateDIBSection
SetMapMode
Rectangle
Polyline
CreateEnhMetaFileW
TextOutA
GetBitmapBits
GetWindowOrgEx
CreateHatchBrush
SetBkColor
CreateCompatibleDC
CloseEnhMetaFile
ExtCreatePen
advapi32
SetSecurityDescriptorOwner
shell32
ShellExecuteExW
CommandLineToArgvW
Sections
.text Size: 882KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jubuhe Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fpiynpr Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tanxa Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
leqcd Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ