Static task
static1
Behavioral task
behavioral1
Sample
f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd.exe
Resource
win10v2004-20240709-en
General
-
Target
f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd.exe
-
Size
212KB
-
MD5
f1c70c7cb29d5327ead87fc87f5be9aa
-
SHA1
a273c64a0322c901ad8d1e240ae67b8968f32da5
-
SHA256
f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd
-
SHA512
13de2a7656f44703242b6e2560bf2bad4c81f4abd12f7d4cb4fadf961d1e632d99ce2f73cdb59ca4dc31cfa2b111ba4c6eb7426c0475bfc1a9666d14355c5db7
-
SSDEEP
3072:hu52XkL0cfYSTsVT0GHQMCn7V6mqt1byXApYZ5IiDM7hUmwp8J2I:y2XkL0YFKTwMCn7s10ApQrM7hUJp8wI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd.exe
Files
-
f82a12fabe1bd6370497ec34c93c8d7045cf35ce4ad4e9586f1a532018b0e7fd.exe.exe windows:5 windows x86 arch:x86
ae6ae0f575f5bb1db94bcba94b27b8df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
IsBadStringPtrW
CommConfigDialogA
SetEndOfFile
FindResourceW
CreateDirectoryW
WriteConsoleInputA
GetComputerNameW
GetModuleHandleW
VirtualFree
SetProcessPriorityBoost
GlobalFindAtomA
LoadLibraryW
CreateEventA
GetModuleFileNameW
CreateFileW
GetACP
ReplaceFileA
GlobalUnlock
RemoveVectoredExceptionHandler
SetLastError
GetProcAddress
AttachConsole
SetFileAttributesA
LocalAlloc
EnumResourceTypesW
CancelIo
GetWindowsDirectoryW
OpenFileMappingA
HeapReAlloc
HeapAlloc
HeapSize
GetStringTypeW
GetLastError
GetDateFormatW
MultiByteToWideChar
LCMapStringW
RtlUnwind
Sleep
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RaiseException
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
DdeCmpStringHandles
CharUpperBuffW
GetClassInfoW
InsertMenuItemW
advapi32
GetLengthSid
ole32
CoRevokeClassObject
CoMarshalHresult
winhttp
WinHttpWriteData
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 35.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ