Static task
static1
Behavioral task
behavioral1
Sample
eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018.exe
Resource
win10v2004-20240508-en
General
-
Target
eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018
-
Size
667KB
-
MD5
8c8458a3be7a3e6d77f0b09f98e1fd60
-
SHA1
10ae009fc5454e57b440b813f63e9f95fee4d5fc
-
SHA256
eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018
-
SHA512
4ce9da58ffd9d33ebf4b0c65abc5b261b835bc03860cc34ac8a3a196aa1fd3c4a91210103a27300c32c5c37f9ce2612543ef7418b2b3bbd5a8503a74eb4e0741
-
SSDEEP
12288:JfTmPE8d4MeKyp8ZRcKToXjqlQdoLBoIjQoR7DUeeE571QOtNYJcKTW:JfTepe5QqKToTb63jN7DnUNyKTW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018
Files
-
eef56fe15cd24e374399bc3baafa28f222814e30575fc9184c3add72d2f0c018.exe windows:6 windows x86 arch:x86
7e603227e4fc039e553a0461b02f6978
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
GetLocalTime
GetSystemDirectoryW
LocalFree
DeviceIoControl
lstrlenA
SetEndOfFile
FlushFileBuffers
GetStringTypeW
SetStdHandle
GetProcessHeap
lstrcatW
lstrcpyW
LockResource
CloseHandle
WriteFile
CreateFileW
CreateDirectoryW
MultiByteToWideChar
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
WriteConsoleW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
RaiseException
DecodePointer
GetFileSizeEx
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapReAlloc
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileAttributesExW
ReadFile
ExitProcess
GetModuleHandleExW
GetStdHandle
HeapFree
HeapAlloc
HeapSize
user32
DefWindowProcW
DestroyWindow
CharNextW
MessageBoxW
advapi32
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
BuildExplicitAccessWithNameW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
shell32
ShellExecuteExW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VarUI4FromStr
shlwapi
StrTrimW
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 466KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ