Static task
static1
Behavioral task
behavioral1
Sample
ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a.exe
Resource
win10v2004-20240508-en
General
-
Target
ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a
-
Size
256KB
-
MD5
04187a8a03d59caa83792af99ff9583a
-
SHA1
c0b2e8aeb7d044c3261ecab834e74570429cf414
-
SHA256
ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a
-
SHA512
d80b68cba1d096f3a55e8d86f351a60f9287fc238a2aadab34af87d109a663ee06361a1527169ac29483f8c6e3ec1b38802b393deb63636ec03c36e278144880
-
SSDEEP
6144:duPip4OUp6ATcpZFMqIohjtt0AhW0VmUW/:d/4VUpiol0AhW0VmU0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a
Files
-
ae4958d5ae9035efa2159a0a6d33a36c0fc5bf96fddcb44da6759a8218aa7f6a.exe windows:6 windows x64 arch:x64
c3bab95a45047938696fde8f844b907e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
desktop_drop_plugin
DesktopDropPluginRegisterWithRegistrar
desktop_multi_window_plugin
DesktopMultiWindowPluginRegisterWithRegistrar
DesktopMultiWindowSetWindowCreatedCallback
flutter_custom_cursor_plugin
FlutterCustomCursorPluginRegisterWithRegistrar
screen_retriever_plugin
ScreenRetrieverPluginRegisterWithRegistrar
texture_rgba_renderer_plugin
TextureRgbaRendererPluginCApiRegisterWithRegistrar
uni_links_desktop_plugin
DispatchToUniLinksDesktop
UniLinksDesktopPluginRegisterWithRegistrar
url_launcher_windows_plugin
UrlLauncherWindowsRegisterWithRegistrar
window_manager_plugin
WindowManagerPluginRegisterWithRegistrar
window_size_plugin
WindowSizePluginRegisterWithRegistrar
flutter_windows
FlutterDesktopMessengerUnlock
FlutterDesktopMessengerLock
FlutterDesktopMessengerIsAvailable
FlutterDesktopMessengerRelease
FlutterDesktopMessengerAddRef
FlutterDesktopMessengerSetCallback
FlutterDesktopMessengerSendResponse
FlutterDesktopMessengerSendWithReply
FlutterDesktopMessengerSend
FlutterDesktopViewControllerGetView
FlutterDesktopViewControllerDestroy
FlutterDesktopViewControllerCreate
FlutterDesktopEngineGetMessenger
FlutterDesktopEngineGetPluginRegistrar
FlutterDesktopEngineReloadSystemFonts
FlutterDesktopEngineDestroy
FlutterDesktopEngineCreate
FlutterDesktopGetDpiForMonitor
FlutterDesktopResyncOutputStreams
FlutterDesktopViewGetHWND
FlutterDesktopViewControllerHandleTopLevelWindowProc
kernel32
RtlUnwind
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
SetStdHandle
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapAlloc
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
DuplicateHandle
LoadLibraryExW
IsDebuggerPresent
GetProcAddress
LoadLibraryA
AttachConsole
GetCommandLineW
LocalFree
WideCharToMultiByte
AllocConsole
FreeLibrary
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RaiseException
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
user32
MoveWindow
MonitorFromPoint
LoadIconW
LoadCursorW
SetParent
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
SetFocus
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
FindWindowW
SetForegroundWindow
DispatchMessageW
TranslateMessage
GetMessageW
shell32
CommandLineToArgvW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ