Static task
static1
Behavioral task
behavioral1
Sample
771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac.exe
Resource
win10v2004-20240412-en
General
-
Target
771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac
-
Size
719KB
-
MD5
a73ebd0e01b564ae8f35f4ff8920081a
-
SHA1
5c95c3895a057912931efb9470622c72db37f77f
-
SHA256
771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac
-
SHA512
5082f3e5c2ca573bfba1f1eb295dae8e79ff404835370246a6d4154caa4714a2eccd87fe1a2483f96d5ea68aa2e0e7a31157df90a45c1d82d53a796de2932049
-
SSDEEP
6144:aD8BWZZ4tzU/Oeknze8SxVp+0XKrCuVGsiQ1kY9g7yzVUL/+m:aD8sZ+toWeknz2xC0XwXVH9gmzVUr+m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac
Files
-
771effd40fd43512b5174f40148d527cb02868449855fc5190f469a50cb6ebac.exe windows:5 windows x86 arch:x86
e6236b8b597d371650e6384c5dd6292e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetExitCodeProcess
GetLogicalDrives
ReadFile
ExitProcess
SetEvent
TerminateProcess
ExitThread
SetLastError
SetConsoleCtrlHandler
OpenFile
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
SetFilePointer
SystemTimeToFileTime
SetFileTime
WriteFile
LocalFileTimeToFileTime
CreatePipe
FreeLibrary
LoadLibraryA
WaitForSingleObject
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
FlushFileBuffers
GetProcessHeap
GetCurrentThreadId
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
CloseHandle
GetFileSize
IsDebuggerPresent
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetUserDefaultLCID
IsValidLocale
TlsFree
TlsSetValue
TlsGetValue
GetStdHandle
GetLastError
AllocConsole
GetCommandLineW
HeapReAlloc
SetEndOfFile
InterlockedExchange
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
RaiseException
HeapAlloc
ResumeThread
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
SetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
HeapFree
CreateThread
wininet
InternetCloseHandle
FtpGetFileSize
HttpQueryInfoW
InternetConnectW
InternetReadFile
FtpOpenFileW
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
psapi
GetMappedFileNameW
comctl32
InitCommonControlsEx
user32
EndDialog
ShowWindow
PostQuitMessage
GetKeyState
SetTimer
SetActiveWindow
KillTimer
SetForegroundWindow
gdi32
GetStockObject
advapi32
RegCloseKey
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
shell32
CommandLineToArgvW
Sections
.text Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ