Static task
static1
Behavioral task
behavioral1
Sample
d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b.exe
Resource
win10v2004-20240226-en
General
-
Target
d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b
-
Size
244KB
-
MD5
8d20bb4b56c322bbfe324a7d9270a202
-
SHA1
e80316d07069a96919310ec0b4a2acc02a60ef23
-
SHA256
d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b
-
SHA512
b3011113b88b2720d8bc34c8e764884de465755b97ca1987c411f262bbb03820afc9d76370e7b705fd41a3e89a47f1637780f100cd5cd12f5272d836380b1ed6
-
SSDEEP
3072:pLn4YaKLi8aAFcfQJ97wBYcWDW4NBnB5oBNxhLOgzpDcI/qZgTGA:jLFJFcfi9sBTwW4nMBNxhLOglD2uT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b
Files
-
d24d31dd4a2f0844ab8ffdbe0bf223364117860ad1744476a49f65f4a285dd0b.exe windows:5 windows x86 arch:x86
2e20d98420cbb10045593073e182f7f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatW
FindVolumeClose
GetConsoleAliasesLengthW
EnumCalendarInfoW
SetDefaultCommConfigW
SetFirmwareEnvironmentVariableA
GetComputerNameW
GetModuleHandleW
CreateNamedPipeW
GetProcessHeap
EnumTimeFormatsW
SetCommTimeouts
GlobalAlloc
LoadLibraryW
GetLocaleInfoW
IsBadWritePtr
GetAtomNameW
GetModuleFileNameW
SetConsoleTitleA
GetCurrentDirectoryW
GetProcAddress
LoadLibraryA
SetConsoleDisplayMode
SetCurrentDirectoryW
WaitForMultipleObjects
FreeEnvironmentStringsW
BuildCommDCBA
VirtualProtect
SetCalendarInfoA
FindAtomW
FileTimeToLocalFileTime
GetFileInformationByHandle
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
FlushFileBuffers
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 39.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ