Static task
static1
Behavioral task
behavioral1
Sample
86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6.exe
Resource
win10v2004-20240226-en
General
-
Target
86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6
-
Size
2.2MB
-
MD5
a62c5d71ca10234cc8baceed15f9a673
-
SHA1
dc26b2208451308479139cb5d7264fd7ea26d0c9
-
SHA256
86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6
-
SHA512
50ef42e12c3fe5f6c32d2a3d9c757d1d82d145c0a9fc8d102d2617edd4711d655ed05570ea693684458f44e46d1ed23c1e045fb6cd92e20bfd6896363357deae
-
SSDEEP
49152:/e34RRazdFg9iYbM3ygjOc3UsuzXb2VSTDkfWKS6CSzvxGzMZ0GgzI82:/eIRUdFWhrvsuz6V3fWKgzIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6
Files
-
86fe248e5d59eaa0bcc84baf7541f82628b42ba2caf6721cfd7c6d4900b35fa6.exe windows:4 windows x86 arch:x86
7d960e5c0b36d4f33947c602c44a13f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetCurrentDirectoryA
WaitForSingleObject
GetExitCodeProcess
SetEndOfFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCPInfo
CreateProcessA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetTickCount
GetFileSize
GetLastError
LocalFree
SetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
GetTempPathW
GetModuleFileNameW
DeleteFileW
GetFileAttributesW
SetFilePointer
ReadFile
CreateDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
SetFileAttributesW
RemoveDirectoryW
GetOEMCP
DeleteFileA
GetFileAttributesA
FormatMessageA
GetTempPathA
GetModuleFileNameA
CreateDirectoryA
SetFileAttributesA
CreateFileA
GetACP
CloseHandle
Sleep
CreateFileW
GetFileTime
WriteFile
FileTimeToLocalFileTime
GetVersionExA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapAlloc
HeapSize
GetProcAddress
HeapFree
user32
GetDlgItemTextA
LoadStringA
DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
GetDlgItemTextW
SetWindowTextW
MoveWindow
SetDlgItemTextW
EnableWindow
SetDlgItemTextA
SetTimer
PostQuitMessage
MessageBoxW
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
CreateWindowExW
DialogBoxParamW
LoadCursorA
RegisterClassExW
LoadStringW
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
GetDlgItem
SendMessageA
PostMessageA
EndDialog
shell32
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
advapi32
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
Sections
.text Size: 324KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ