Static task
static1
Behavioral task
behavioral1
Sample
23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040.exe
Resource
win10v2004-20240508-en
General
-
Target
23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040
-
Size
68KB
-
MD5
594409bc2187bc7c87c97b495c731d5c
-
SHA1
2fe0eb906025df93d89c82a521ef9ba50ba6d5f8
-
SHA256
23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040
-
SHA512
cf5e5f84450d8b893c0d915c3e8193de1cf9ded1a51d32bfb2cddc9d71e20b33b6defc48b93fdc69662d4a23228f8e4f9e713251ca966f2da4c2ccbe5e710bdd
-
SSDEEP
768:3QwacjCoADoxooBVGmKl0bhHgKwknVMSXGzUsy0:3FjCocoxvGmMshAKBGpW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040
Files
-
23278672529f348ca5f40ac4d741d78cf9d51022c9e34c6c1163700f3b323040.exe windows:4 windows x86 arch:x86
e6111516863688f733a3ae279a53a3c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
ReleaseMutex
Sleep
CreateFileA
LoadLibraryA
CreateMutexA
OpenMutexA
GetACP
GetModuleFileNameA
lstrcatA
CloseHandle
DefineDosDeviceA
FreeLibrary
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
UnhandledExceptionFilter
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetVersionExA
GetEnvironmentVariableA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
MessageBoxA
GetDlgItem
LoadStringA
PostQuitMessage
DestroyWindow
FindWindowA
SetForegroundWindow
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA
ShowWindow
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
EnableWindow
SendMessageA
PostMessageA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ