Static task
static1
Behavioral task
behavioral1
Sample
7f1e84304e25dca5dfc47654039a967435ebf5b730ded5b5d213755de0923c58.exe
Resource
win10v2004-20240508-en
General
-
Target
7f1e84304e25dca5dfc47654039a967435ebf5b730ded5b5d213755de0923c58
-
Size
343KB
-
MD5
cd195b04b3027930a6c8745b6a519831
-
SHA1
80c1ced41705750cb5bc935ac49a3f308d5d70a9
-
SHA256
7f1e84304e25dca5dfc47654039a967435ebf5b730ded5b5d213755de0923c58
-
SHA512
745ebadfdaf729f55039c7f92cfb98057bf59678483cd0b93eefdd32cfed4227ab46ddde29e6e8f894f75ecd3e6411bd9ae987a09f48557cbbb92639a27a2bc7
-
SSDEEP
3072:n7jLTjIhDQwsBvlJ3pyAX+7FfuJfAKJCxEuLI4B23Rgo74m4kATgY4mqzgq/4:3LTYHsB737+7xg7cR23RgrhTgY4ZcU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f1e84304e25dca5dfc47654039a967435ebf5b730ded5b5d213755de0923c58
Files
-
7f1e84304e25dca5dfc47654039a967435ebf5b730ded5b5d213755de0923c58.exe windows:5 windows x86 arch:x86
e2951b639ced9fe0841d8ee8725aea34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputW
InterlockedIncrement
EnumCalendarInfoW
GetTimeFormatA
GetModuleHandleW
GetTickCount
GetConsoleAliasesLengthA
GetSystemTimes
SetVolumeMountPointA
FormatMessageW
GetStringTypeExW
FindNextVolumeW
GetConsoleAliasW
SetTimeZoneInformation
SetConsoleTitleA
GetConsoleAliasesW
GetStringTypeA
GetThreadLocale
GetProcAddress
BuildCommDCBW
LoadLibraryA
LocalAlloc
SetConsoleOutputCP
GetModuleFileNameA
GetProcessAffinityMask
FreeEnvironmentStringsW
EnumDateFormatsW
CompareStringA
DeleteCriticalSection
DeleteAtom
OpenFileMappingA
LocalFileTimeToFileTime
SetLastError
GetComputerNameA
MultiByteToWideChar
GetLastError
HeapReAlloc
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
WriteFile
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
GetModuleHandleA
advapi32
RevertToSelf
winhttp
WinHttpAddRequestHeaders
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 23.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ