Static task
static1
Behavioral task
behavioral1
Sample
bf8483792084de63b9f5e74934aeed7e8aa9de61a1fa89ab518d54367eb70449.exe
Resource
win10v2004-20240426-en
General
-
Target
bf8483792084de63b9f5e74934aeed7e8aa9de61a1fa89ab518d54367eb70449
-
Size
366KB
-
MD5
2b4399f121325c7b243c020345a16d29
-
SHA1
48dac77997bde48fb8111b9aeeec5a0b9fbde88b
-
SHA256
bf8483792084de63b9f5e74934aeed7e8aa9de61a1fa89ab518d54367eb70449
-
SHA512
a7ac35241f783d376a7077df4266fe7e56476e064a5b0009a42e095d12e256535944da81c4d951d263069b884f44a7b4fe0b2a8ed76ac73396054a910db4e3ea
-
SSDEEP
6144:OumbY5CsTONMI5+dcIIMprOeXcoEo7f6Z/:OFEQhmI5mtDdOe1EoOZ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf8483792084de63b9f5e74934aeed7e8aa9de61a1fa89ab518d54367eb70449
Files
-
bf8483792084de63b9f5e74934aeed7e8aa9de61a1fa89ab518d54367eb70449.exe windows:5 windows x86 arch:x86
b4d20027d350bc9f50d33365892b0205
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
GetCommState
InterlockedDecrement
SetConsoleScreenBufferSize
GetModuleHandleW
GetProcessHeap
GetSystemTimes
GlobalAlloc
GetLocaleInfoW
lstrcpynW
IsBadWritePtr
SetCurrentDirectoryA
GetCurrentDirectoryW
SetLastError
GetProcAddress
BuildCommDCBW
LoadLibraryA
WriteConsoleA
SetFileApisToANSI
FindNextChangeNotification
FindAtomA
FreeEnvironmentStringsW
EnumDateFormatsW
GetSystemTime
SetFileAttributesW
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 38.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ