Static task
static1
Behavioral task
behavioral1
Sample
0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9.exe
Resource
win11-20240611-en
General
-
Target
0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9
-
Size
613KB
-
MD5
43fabf19a2fbd73f2948d3eebff56439
-
SHA1
be863b1eedfeb7d0238a182fd8dad7901e72bb13
-
SHA256
0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9
-
SHA512
db7f5075f11d4dbd18d7de3c22a43b578692d542412681667c90786f78dc36e5a7416e3ff3780dc638600623fabd273e3c15dcd1b11204d91cc29996e54c1c8f
-
SSDEEP
12288:5wsr4w8+A7edi7xtG56RxOEO0kwY0twCruIx:5mGceoxt68OEQd0yCruIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9
Files
-
0d1a5c39dea3d740f63664dfca5219d4ecf06f6dcf03821fbbe7a1df222e63c9.exe windows:5 windows x86 arch:x86
20416598f05e62fc9fbb1d1a61b1d260
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetUserDefaultLangID
TlsSetValue
GlobalAlloc
LoadLibraryW
AssignProcessToJobObject
GetACP
IsBadStringPtrA
OpenMutexW
GetLastError
SetLastError
GetProcAddress
SetComputerNameA
BuildCommDCBW
LoadLibraryA
InterlockedExchangeAdd
GetDiskFreeSpaceA
FoldStringA
GetModuleFileNameA
FindFirstVolumeMountPointA
LoadLibraryExA
lstrcatW
OutputDebugStringA
WriteProcessMemory
HeapFree
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapCreate
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
RtlUnwind
GetCPInfo
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
CreateFileW
CloseHandle
GetStringTypeW
LCMapStringW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 393KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ