Static task
static1
Behavioral task
behavioral1
Sample
9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c.exe
Resource
win10v2004-20240226-en
General
-
Target
9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c
-
Size
56KB
-
MD5
d8d23d4db86088e599fd824fd1a8a4e4
-
SHA1
8c337551562df9d029dfa190d4aac3dd41fe3fe3
-
SHA256
9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c
-
SHA512
13ae5aeb88540beec7372b21697083dd1744792ad892bd5253e2235f7052da0d66d5c900e14ffea823156bfcd6653858ccbaee368de9b0672c87e54dc8fe442f
-
SSDEEP
1536:frtArZtgZBWatzMefFXnFg9K0mkNk0fYx:fZItgWKzMe49K0B1fYx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c
Files
-
9bb1777c4224ec78728b1ba8d6f25dd94a5a284271bd8cbc6f1cca3f5be03f9c.exe windows:5 windows x86 arch:x86
3c568d9447edfdde8391ac5462645f18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetLastError
FormatMessageA
LoadLibraryA
GetProcAddress
LocalFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
Sleep
HeapFree
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WriteConsoleW
MultiByteToWideChar
SetFilePointer
HeapAlloc
HeapReAlloc
LoadLibraryW
FlushFileBuffers
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
HeapSize
CompareStringW
SetEnvironmentVariableA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ