Static task
static1
Behavioral task
behavioral1
Sample
162948d6122a763c1f9f1cf1a610bef0143c65d74853c8a3d718eb93c6bc4737.exe
Resource
win10v2004-20240508-en
General
-
Target
162948d6122a763c1f9f1cf1a610bef0143c65d74853c8a3d718eb93c6bc4737
-
Size
296KB
-
MD5
916382815a1114328dac7639c002c206
-
SHA1
50a73b454642b91cf007a64526646fecc4f626e2
-
SHA256
162948d6122a763c1f9f1cf1a610bef0143c65d74853c8a3d718eb93c6bc4737
-
SHA512
513b685036dad7e1ab030f58446c9d960fbe048943f630f27cd061507212eca0792c5671cb8ee003421df77d2366bf9767bb831451a19a49154d614c849c30cc
-
SSDEEP
3072:3ywHzo6g6Xb1U5D62hMJtipmzDjehOZcM+CBE1pM7kaXsX9kGWMD6RWaH3W:3vov6XJa62hM+ODrL0K3Rx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 162948d6122a763c1f9f1cf1a610bef0143c65d74853c8a3d718eb93c6bc4737
Files
-
162948d6122a763c1f9f1cf1a610bef0143c65d74853c8a3d718eb93c6bc4737.exe windows:5 windows x86 arch:x86
89da60536c5418e00b24d25198c52e27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
OpenJobObjectA
InterlockedCompareExchange
CreateHardLinkA
GetSystemDefaultLCID
GetTickCount
GetNumberFormatA
GlobalFindAtomA
LoadLibraryW
GetConsoleAliasW
IsBadWritePtr
SetLastError
GetProcAddress
SetFileAttributesA
LoadLibraryA
OpenMutexA
GetConsoleAliasesLengthW
FindFirstVolumeMountPointW
GetDiskFreeSpaceA
GlobalHandle
EnumResourceTypesW
GetOEMCP
FindFirstVolumeMountPointA
LoadLibraryExA
lstrcatW
OpenFileMappingW
GetWindowsDirectoryW
CommConfigDialogW
SetStdHandle
WriteConsoleW
CloseHandle
SetFilePointer
FlushFileBuffers
FindResourceA
IsBadStringPtrW
GetComputerNameA
LocalAlloc
GetSystemDefaultLangID
MultiByteToWideChar
GetLastError
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
HeapFree
HeapAlloc
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
RtlUnwind
LCMapStringW
GetStringTypeW
HeapSize
RaiseException
GetConsoleCP
GetConsoleMode
CreateFileW
user32
DdeCmpStringHandles
GetCaretPos
GetKeyboardLayoutNameA
GetWindowTextLengthA
gdi32
GetCharacterPlacementA
advapi32
BackupEventLogA
ClearEventLogA
Sections
.text Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ