Static task
static1
Behavioral task
behavioral1
Sample
9ac6091f248f96449efd2f980e3f0e7eba346ead8d5bbdc1fd317f631b599f8a.exe
Resource
win10v2004-20240709-en
General
-
Target
9ac6091f248f96449efd2f980e3f0e7eba346ead8d5bbdc1fd317f631b599f8a
-
Size
247KB
-
MD5
5faf9b3ddfd72469e018150213fc5942
-
SHA1
d12fbe8ad22388ed55cdd7e0ffed9caa93398954
-
SHA256
9ac6091f248f96449efd2f980e3f0e7eba346ead8d5bbdc1fd317f631b599f8a
-
SHA512
621c282fd0e4a2f73663f30d048913f5445ced684b2063e492482ac24b6e4f78b49f106e1b3f1bbb212ddae956fa6b141de6cdaaffc4b2d4e24c14429a65e057
-
SSDEEP
3072:pyHdN9Of1oLLc1iDcni4pDTzvQW6XaYzKLF0BNDmiPwlicWYj01T7E//ydBkDewg:+dTFLQoDcZpHzvp6XaX+0ipp1T7dB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ac6091f248f96449efd2f980e3f0e7eba346ead8d5bbdc1fd317f631b599f8a
Files
-
9ac6091f248f96449efd2f980e3f0e7eba346ead8d5bbdc1fd317f631b599f8a.exe windows:5 windows x86 arch:x86
d73be4da3047a4d3c49a9127af40d7dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
FindResourceW
LocalCompact
WriteConsoleInputA
GetComputerNameW
GetWindowsDirectoryA
GetDateFormatA
SetProcessPriorityBoost
GlobalFindAtomA
LoadLibraryW
FreeConsole
CreateEventA
GetModuleFileNameW
CreateFileW
GetACP
IsBadStringPtrA
ReplaceFileA
CreateDirectoryA
GetLastError
CommConfigDialogA
GetProcAddress
GlobalFree
GetDiskFreeSpaceW
LocalAlloc
EnumResourceTypesW
GetModuleHandleA
CancelIo
OpenFileMappingW
GetWindowsDirectoryW
SetFileAttributesW
RaiseException
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
SetLastError
RemoveVectoredExceptionHandler
LCMapStringW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
CharUpperBuffA
GetClassInfoW
InsertMenuItemW
ShowCursor
advapi32
GetLengthSid
ole32
CoSuspendClassObjects
CoUnmarshalHresult
winhttp
WinHttpOpen
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 36.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ