Static task
static1
Behavioral task
behavioral1
Sample
f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584.exe
Resource
win10-20240611-en
General
-
Target
f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584
-
Size
211KB
-
MD5
aeb1d328221b268578d7ff6c7cb64f87
-
SHA1
b086cb9738de2b72943d033ae6337848a1bef90e
-
SHA256
f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584
-
SHA512
ad7013661fdccaa2334c384b1cbc009d2cf76da1b75541a98a5a768fc14eaee7287c8445bcd5323a4e1789d88d9d79549ce92706c6473ea9451a76225a762e90
-
SSDEEP
3072:nvx8gKClQiS5NchbQtvajVBG6MVN0Kd24kfc3A/:vx8gKlJ8JBG6FKkU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584
Files
-
f40c3883f19dda754f0d00ab1e51d8d691c680490ea4040f6a03ac0337ba2584.exe windows:5 windows x86 arch:x86
4bdd01efb3f9cfa329abd02683ca7679
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveVectoredExceptionHandler
IsBadStringPtrW
SetEndOfFile
FindResourceW
CreateDirectoryW
WriteConsoleInputA
GetModuleHandleW
VirtualFree
LoadLibraryW
GetModuleFileNameW
GetACP
ReplaceFileA
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
CreateFileA
OpenMutexA
LocalAlloc
GlobalGetAtomNameW
EnumResourceTypesW
CancelIo
OpenFileMappingW
GetWindowsDirectoryW
HeapReAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
AttachConsole
GetDateFormatW
LCMapStringW
RtlUnwind
Sleep
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RaiseException
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
InsertMenuItemW
CharUpperBuffW
DdeKeepStringHandle
GetClassInfoW
advapi32
GetLengthSid
ole32
CoRevokeClassObject
CoMarshalHresult
winhttp
WinHttpWriteData
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 35.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ