Static task
static1
Behavioral task
behavioral1
Sample
7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3.exe
Resource
win11-20240426-en
General
-
Target
7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3
-
Size
241KB
-
MD5
3ff8b168b8a7f04d48afb6972d7732a0
-
SHA1
7d912a7b220f440b32a6847c7fd2ed5897b56a5d
-
SHA256
7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3
-
SHA512
7175e2e202ec82ec740c679285e5a6b1bd86c9c6717a6d0e112c122ed2a901027b57fda71d83438e00763a3374b01f9b48b24df23b894c0f8bc7dd78dd7ea169
-
SSDEEP
1536:IM8WdGb6f+kqO2UbXhk0LkQ2a8MOFP7kkW3o7QdQpRTc3kSrjo6Z8oXrNh5ry/IY:tJQ9/0Mnl7kxo3Lw0nobD5ryu95Luj/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3
Files
-
7d5961b64d45bd62968eca15f2811c7aa1df243dcc57e5aafdf4de2f4f47c9c3.exe windows:5 windows x86 arch:x86
e66357e5bb3e538c595cdebf3c5e0651
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
FreeEnvironmentStringsA
GetModuleHandleW
GetConsoleAliasesA
GetConsoleAliasesLengthA
EnumTimeFormatsW
ActivateActCtx
ReadFileScatter
WriteConsoleOutputA
InitAtomTable
InterlockedPopEntrySList
SetConsoleMode
GetFileAttributesW
LocalReAlloc
FileTimeToSystemTime
GetModuleFileNameW
CompareStringW
RaiseException
InterlockedExchange
SetLastError
GetProcAddress
GetProcessHeaps
BuildCommDCBW
LoadLibraryA
UnhandledExceptionFilter
SetConsoleTitleW
DeleteCriticalSection
GetShortPathNameW
SetCalendarInfoA
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
CreateFileA
CloseHandle
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ