Static task
static1
Behavioral task
behavioral1
Sample
99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355.exe
Resource
win10v2004-20240704-en
General
-
Target
99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355
-
Size
425KB
-
MD5
ff8b4333a3754f62151671b7e8328719
-
SHA1
d177bb98a5f824a5aafb2eda0dab5ba31e758162
-
SHA256
99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355
-
SHA512
c6a3df8a4fa2424695ee315c1152f49c69a92c790d7b97dc7d1fd7e764a29f068949faa85aec7f59aae79c99b4e56fb148fc96823d42f208d1bf5a7564690568
-
SSDEEP
12288:IJ32J40WiN0/xRE/KNBHn1SC2nlvuE9hCmlLt9:IJ3+40WiG/8/KvHn1SCslvuoTlt9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355
Files
-
99f5d32414fd40ec2e42e5bca9e9362c0987d66e2a7f1ceb1e0ce7a357bf2355.exe windows:5 windows x86 arch:x86
c8eb98e0c5afa64abcdd38d3b8489c6f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetTimeZoneInformation
LocalAlloc
CreateIoCompletionPort
ExpandEnvironmentStringsA
SearchPathA
HeapUnlock
HeapWalk
DisableThreadLibraryCalls
GlobalUnlock
SetCommMask
BackupWrite
GetCommProperties
GetFileAttributesA
ReadFile
TlsGetValue
SetLastError
DeactivateActCtx
DnsHostnameToComputerNameA
FreeLibrary
GlobalAlloc
UpdateResourceA
EnterCriticalSection
BindIoCompletionCallback
GetTempFileNameA
TransmitCommChar
GetCurrentProcess
EraseTape
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
DebugBreakProcess
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
GetCurrentDirectoryA
GetFullPathNameA
SetFilePointer
GetFileType
SetHandleCount
MultiByteToWideChar
GetModuleFileNameA
GlobalReAlloc
FindResourceA
GetProcessHeaps
FindActCtxSectionStringA
MapUserPhysicalPages
SetFileApisToOEM
GetProcAddress
GetModuleHandleA
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
RaiseException
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
CreateDirectoryA
user32
UnregisterDeviceNotification
InflateRect
GetWindowContextHelpId
GetPropA
DestroyCursor
SetCaretPos
DestroyMenu
GetMenuDefaultItem
GetTitleBarInfo
GetShellWindow
PaintDesktop
SwitchToThisWindow
UnregisterHotKey
CreateIconFromResource
EndDialog
SystemParametersInfoA
SetUserObjectSecurity
SetScrollInfo
GetIconInfo
ShowWindow
CopyIcon
IsChild
GetDCEx
DrawIcon
CreateAcceleratorTableA
GetClassInfoA
GetKeyboardLayoutList
OpenClipboard
CreateIconIndirect
FlashWindowEx
GetScrollInfo
CharNextA
SetWindowsHookA
GetWindowLongA
HiliteMenuItem
WaitForInputIdle
ShowScrollBar
GetWindowPlacement
CheckMenuRadioItem
GetWindowInfo
SetWindowLongA
SetMenuItemInfoA
DrawCaption
AdjustWindowRect
CreateIconFromResourceEx
SetCursorPos
advapi32
SetSecurityDescriptorDacl
AddAccessDeniedAce
SetSecurityDescriptorRMControl
AccessCheckByType
AllocateLocallyUniqueId
OpenEncryptedFileRawA
SetSecurityDescriptorControl
GetNumberOfEventLogRecords
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE