Static task
static1
Behavioral task
behavioral1
Sample
4536c634e3135fc2e95334c4e59ed0c6502541111f5c5c71326f3eb556400379.exe
Resource
win10v2004-20240709-en
General
-
Target
4536c634e3135fc2e95334c4e59ed0c6502541111f5c5c71326f3eb556400379
-
Size
253KB
-
MD5
302427588f7369bbea3636b0e11b94ce
-
SHA1
e1fde78c2e864fc10048dec5dd89c065365f3fb3
-
SHA256
4536c634e3135fc2e95334c4e59ed0c6502541111f5c5c71326f3eb556400379
-
SHA512
31f802fb897a5ea8abf683dc560ef828527b47352f71d7775b30ea495c65bce9c3ddf41149f1bd2c7adea5c7a48d2a5d0637cee7308b9ed809c9d6ffa7c109fe
-
SSDEEP
3072:dUmLdtAn96UJgN7IsU7HZoU1Fk1AFlK+OORb8zPlm3553OQavq91lFIi:dtLdtAfJgN7IsUVFk1GGOZ8zNji91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4536c634e3135fc2e95334c4e59ed0c6502541111f5c5c71326f3eb556400379
Files
-
4536c634e3135fc2e95334c4e59ed0c6502541111f5c5c71326f3eb556400379.exe windows:5 windows x86 arch:x86
8ae71ed2b43abefaddca1647332de920
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
ZombifyActCtx
CreateJobObjectW
GetCommProperties
GetModuleHandleW
GetConsoleAliasesA
GlobalAlloc
LoadLibraryW
Sleep
SetVolumeMountPointA
lstrcpynW
GetAtomNameW
WritePrivateProfileStringW
InterlockedExchange
SetLastError
GetProcAddress
LoadLibraryA
WriteConsoleA
UnhandledExceptionFilter
LocalAlloc
AddAtomW
SetFileApisToANSI
OpenJobObjectW
FoldStringA
GetModuleFileNameA
EnumDateFormatsA
lstrcatW
BuildCommDCBA
GetShortPathNameW
FindFirstVolumeA
FlushFileBuffers
CloseHandle
CreateFileA
GetLastError
HeapFree
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
HeapSize
user32
GetProcessDefaultLayout
ole32
CoTaskMemAlloc
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 561KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jewuja Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xuhapi Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kayem Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ