Static task
static1
Behavioral task
behavioral1
Sample
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe.exe
Resource
win10-20240404-en
General
-
Target
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
-
Size
825KB
-
MD5
58abe55a31e14c31899d613b8352aa8b
-
SHA1
746f90892894e17dc83c2331e1dd4c9da0483b2f
-
SHA256
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
-
SHA512
e5c47096e6797ba15a7094cdd138ddf7987a9ba7a3f908deb2e584a3934a422ea966de49fcaab853ac49030113f3cb03990801f9025eb1492822550d338672a1
-
SSDEEP
12288:V6aTUI6c4iaqhshaglJCiv6vrGDpvYub+wo32D3U2znHhy9MRq9CKT7wh50KBmr/:ZB6ccOg/7CzXuCz3KlH4MRkz7s51mca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe
Files
-
611e8706ab4dd4da993e08a91e6da4a91783b97285c51a69214ee7d58e37f2fe.exe windows:5 windows x86 arch:x86
d0eb7b8c702cd1b9d76bcc539912ddcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
EnumCalendarInfoA
GetConsoleAliasesLengthW
VirtualQuery
GetCommState
HeapFree
GetComputerNameW
UnlockFile
WaitForSingleObjectEx
GetModuleHandleW
GetDateFormatA
EnumTimeFormatsW
GlobalAlloc
LoadLibraryW
IsValidLocale
GetLocaleInfoW
IsBadWritePtr
GetAtomNameW
FindNextVolumeMountPointW
SetCurrentDirectoryA
GetCurrentDirectoryW
GetLongPathNameW
GetProcAddress
GetProcessHeaps
BuildCommDCBW
LoadLibraryA
SetCalendarInfoW
GetModuleFileNameA
SetConsoleTitleW
FreeEnvironmentStringsW
BuildCommDCBA
VirtualProtect
FileTimeToLocalFileTime
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
FlushFileBuffers
GetModuleHandleA
user32
LoadIconW
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 39.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ