Static task
static1
Behavioral task
behavioral1
Sample
daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735.exe
Resource
win10v2004-20240508-en
General
-
Target
daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735
-
Size
546KB
-
MD5
9181544413c0c6f49e6d2756646ca3ec
-
SHA1
492b2fe56fcf8968e0da135121798267fd8ab0fd
-
SHA256
daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735
-
SHA512
e6a757489678c3de92decf16c0c96b8c50c20c0801853e112f77c9762166cee2d7429435d0c08255f485f7286d15e1e2d49b2f018d66d7d7c02cadb6f41cac26
-
SSDEEP
6144:E+h1GYqHXGGRuieqNxrX9cWGXyFpyLLCu3YQbLWLgVULSeRe:E+PkHXGlieqNxz9ctymfXbLlUWye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735
Files
-
daff07f224cef55ac76755c492707624cd6206fab60f898c22ce9793442b9735.exe windows:5 windows x86 arch:x86
e6236b8b597d371650e6384c5dd6292e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetExitCodeProcess
GetLogicalDrives
ReadFile
ExitProcess
SetEvent
TerminateProcess
ExitThread
SetLastError
SetConsoleCtrlHandler
OpenFile
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
SetFilePointer
SystemTimeToFileTime
SetFileTime
WriteFile
LocalFileTimeToFileTime
CreatePipe
FreeLibrary
LoadLibraryA
WaitForSingleObject
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
FlushFileBuffers
GetProcessHeap
GetCurrentThreadId
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
CloseHandle
GetFileSize
IsDebuggerPresent
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetUserDefaultLCID
IsValidLocale
TlsFree
TlsSetValue
TlsGetValue
GetStdHandle
GetLastError
AllocConsole
GetCommandLineW
HeapReAlloc
SetEndOfFile
InterlockedExchange
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
RaiseException
HeapAlloc
ResumeThread
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
SetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
HeapFree
CreateThread
wininet
InternetCloseHandle
FtpGetFileSize
HttpQueryInfoW
InternetConnectW
InternetReadFile
FtpOpenFileW
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
psapi
GetMappedFileNameW
comctl32
InitCommonControlsEx
user32
EndDialog
ShowWindow
PostQuitMessage
GetKeyState
SetTimer
SetActiveWindow
KillTimer
SetForegroundWindow
gdi32
GetStockObject
advapi32
RegCloseKey
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
shell32
CommandLineToArgvW
Sections
.text Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ