Static task
static1
Behavioral task
behavioral1
Sample
be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507.exe
Resource
win10v2004-20240226-en
General
-
Target
be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507
-
Size
303KB
-
MD5
0d59ab82ef6e559e1e75efd1ca012345
-
SHA1
3406c15d275471617a890c8289e3039a013c5dea
-
SHA256
be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507
-
SHA512
22c26e449da527f560fd93fe90e424c1931f86435b506d590db8a241985ab57feb0ed67147a917ae1407098c9b2eb4d0d2281feb8d717999a2d6f165bc497a53
-
SSDEEP
6144:hwgZV9I1+oRbIYRuNMVKFN2E6SXgHWezg5:hwgT9I4oRiN3M9Oe9g5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507
Files
-
be636541d943b8b4f56c2f5911090447bfe4c81262e3a97088c6f47842c57507.exe windows:5 windows x86 arch:x86
3b9f030e1db7d97ee45a3b9330ae9ed1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
GetThreadContext
CreateConsoleScreenBuffer
GetMailslotInfo
FlushFileBuffers
TlsGetValue
IsDBCSLeadByte
LocalAlloc
GetTempPathA
FindVolumeMountPointClose
GetConsoleOutputCP
VirtualProtect
CreateMailslotA
lstrlenW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
SetStdHandle
SetFilePointer
WriteConsoleW
CloseHandle
SetCommBreak
GetModuleFileNameW
SetDefaultCommConfigA
SetFileShortNameW
GetNumberOfConsoleMouseButtons
WriteProfileSectionA
GetConsoleCP
DosDateTimeToFileTime
HeapSize
GetStringTypeW
LCMapStringW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
HeapAlloc
HeapReAlloc
WideCharToMultiByte
GetConsoleMode
IsValidLocale
user32
HiliteMenuItem
LoadAcceleratorsW
GetPropW
GetMenuInfo
RemovePropW
AppendMenuA
SetDlgItemInt
gdi32
AddFontResourceW
CreateICW
PolyDraw
ResetDCW
SetICMProfileA
GetGlyphOutlineA
TranslateCharsetInfo
ole32
CoIsOle1Class
OleSave
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ