Static task
static1
Behavioral task
behavioral1
Sample
1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437.exe
Resource
win10v2004-20240419-en
General
-
Target
1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437
-
Size
724KB
-
MD5
836f59ce971572650aecdd5f93cb6188
-
SHA1
9dc04e46150ebca230f21e61cbfdee237e9a44de
-
SHA256
1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437
-
SHA512
32d8a9a25e2e12d9d8b4dec1371b64f84557e5ad041ed623af8a56df4d89b125f2cc95e86b00322f90125d84639f1b1f9e421ec9c22c61cfe58a66f75af15871
-
SSDEEP
6144:tiRZ2iIQk3mdsZHkdQumZWjBlBME4z/qFST6dsKKyNrKc:toFk5SAZoBlB94zyS6CNK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437
Files
-
1dd962ff619ff2576541f8609ea6eb188d2a29371bf6a4285a37fc70264d1437.exe windows:6 windows x64 arch:x64
26445a46420cd5df93eccfdeb18bd03b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d2d1
ord1
dwrite
DWriteCreateFactory
shell32
DragAcceptFiles
DragQueryFileW
ShellExecuteW
CommandLineToArgvW
DragFinish
msi
ord88
ord137
ord141
comctl32
ord345
InitCommonControlsEx
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
SetStdHandle
FlushFileBuffers
GetACP
IsValidCodePage
GetStringTypeW
SetFilePointerEx
InitializeCriticalSectionEx
GetLastError
HeapSetInformation
DecodePointer
DeleteCriticalSection
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
SetLastError
EnterCriticalSection
GetCommandLineW
LeaveCriticalSection
GetFileAttributesW
GetCurrentThreadId
RaiseException
LocalFree
GetSystemTime
MulDiv
FindFirstFileW
FindNextFileW
FindClose
ReadFile
GetFileInformationByHandleEx
WriteFile
CreateFileW
DeleteFileW
CloseHandle
MoveFileExW
GetCurrentProcessId
GetConsoleOutputCP
GetFinalPathNameByHandleW
GetModuleFileNameW
GetModuleHandleW
MultiByteToWideChar
FormatMessageW
HeapReAlloc
HeapSize
GetFileType
LCMapStringW
GetStdHandle
ExitProcess
GetCPInfo
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
GetConsoleMode
ReadConsoleW
SetEndOfFile
VirtualAlloc
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
OutputDebugStringW
EncodePointer
HeapAlloc
HeapFree
GetProcessHeap
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
WriteConsoleW
VirtualFree
GetProcAddress
LoadLibraryExA
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetLocaleInfoEx
WaitForSingleObjectEx
GetExitCodeThread
FindFirstFileExW
GetFileAttributesExW
WideCharToMultiByte
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
user32
IsWindowVisible
SetWindowPos
GetDpiForWindow
SetWindowLongPtrW
CreateWindowExW
SetWindowTextW
GetWindowLongPtrW
RegisterClassExW
GetWindowPlacement
ChangeWindowMessageFilter
LoadIconW
LoadCursorW
InsertMenuW
DestroyWindow
PostQuitMessage
SystemParametersInfoW
GetClassInfoExW
InvalidateRect
BeginPaint
EndPaint
EnableWindow
GetWindowTextW
MessageBoxExW
SendMessageW
MessageBeep
GetMessageW
MessageBoxW
UnregisterClassW
ShowWindow
DispatchMessageW
TranslateMessage
UpdateWindow
CallWindowProcW
GetSystemMenu
DefWindowProcW
GetWindowTextLengthW
SetForegroundWindow
GetClientRect
gdi32
CreateFontIndirectW
DeleteObject
GetObjectW
GetStockObject
shlwapi
PathFileExistsW
Sections
.text Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ