Static task
static1
Behavioral task
behavioral1
Sample
40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3.exe
Resource
win10v2004-20240226-en
General
-
Target
40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3
-
Size
429KB
-
MD5
b14328a4250804cf27dba47563f7d9ab
-
SHA1
5ff107bc26211a9868daf593eee3f8ebbdf419e7
-
SHA256
40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3
-
SHA512
ea3f40b38a1316c41a43b80d194ed2ffbbe34f122763534ecfe3f1ca87cf26fd7f07d253706c6f3b845c94e1b7f7f2b48508f0ecf716e4c4ff17af8af97ec94d
-
SSDEEP
12288:kpb1CNhZTayukk5v1OEic1q03MXj0b0M6AzEE:kpb1CNhZTJEic11MXAb0MBR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3
Files
-
40a897701228559f91f8bcada49f404732a59045a8e68edd0807788982b0f5d3.exe windows:6 windows x86 arch:x86
86a458e94a0d2d54517daff8c78b4e02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryFileAorW
ExtractAssociatedIconW
resutils
ResUtilGetMultiSzProperty
ResUtilGetPrivateProperties
ResUtilGetSzValue
ResUtilSetPropertyParameterBlock
ResUtilGetPropertySize
comdlg32
PrintDlgExA
ChooseColorW
PrintDlgA
ChooseFontA
ole32
GetRunningObjectTable
CoCreateGuid
CoMarshalInterThreadInterfaceInStream
OleSetMenuDescriptor
loadperf
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
wininet
UnlockUrlCacheEntryStream
GetUrlCacheEntryInfoA
FindNextUrlCacheEntryA
InternetGoOnline
FtpCreateDirectoryW
kernel32
CreateFileW
CloseHandle
HeapReAlloc
WriteConsoleW
EncodePointer
DecodePointer
ReadFile
ReadConsoleW
TlsGetValue
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetConsoleCtrlHandler
GetProcessHeap
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
RaiseException
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
Sections
.text Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ