Static task
static1
Behavioral task
behavioral1
Sample
d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d.exe
Resource
win10v2004-20240709-en
General
-
Target
d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d.exe
-
Size
47.2MB
-
MD5
c94ce9fe4a4196524140a8f6076179b8
-
SHA1
5d05e31ea672a9bd6c49b3e6ae07d9e9c3f3f2c3
-
SHA256
d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d
-
SHA512
02df0cd32f8b410890bdbe0c97b191651ed91b17f318ac3e14961b069464fc58b15bde63e6460fdc2027677b47ac498baf38ab15c390f80f03906db58fc49f5c
-
SSDEEP
786432:PBwrvvN1qHxZX9kxDyBjKH/6CuyJjxA4xa+pRbMjfxyvA1EoV3d3Dp27Cpq:abE32H//uyJdIABMj5hdRwGpq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d.exe
Files
-
d96c53ecbfa4b9d81f6c58077965bb2e31472a8bda4d4446ef8f45f9c601b11d.exe.exe windows:5 windows x64 arch:x64
ecaebdd84a449da2f3658005538cca70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
SysStringLen
user32
CharUpperW
kernel32
WriteConsoleW
HeapSize
ReadConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
SetFileApisToOEM
GetCommandLineW
MultiByteToWideChar
GetLastError
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
FormatMessageW
LocalFree
GetSystemDirectoryW
CreateFileW
SetFileTime
CloseHandle
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetLastError
GetCurrentDirectoryW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetFileInformationByHandle
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcess
GetProcessAffinityMask
GetSystemInfo
GlobalMemoryStatusEx
GetStdHandle
SetConsoleCtrlHandler
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetConsoleMode
SetConsoleMode
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
lstrlenW
GetVersionExW
lstrcatW
RtlUnwind
ReleaseSemaphore
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
CreateSemaphoreW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetEnvironmentStringsW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
TerminateProcess
GetCommandLineA
GetFileType
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
Sections
.text Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ