Static task
static1
Behavioral task
behavioral1
Sample
1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1.exe
Resource
win10v2004-20240709-en
General
-
Target
1.exe
-
Size
292KB
-
MD5
1f4323073e03741450015dbe647aba2e
-
SHA1
a772c82f29b7ec056cabfbf584d9a89f1dd1b919
-
SHA256
2f0677f3129fefcd9c91182e9b494868110d34da56055a98ab1264fb8f18a8ef
-
SHA512
65c93d9dd668795e23d0e66d5dd4a1e4ddeb8cd612e0e0a308270714d8c663a7742f8c0715eaf3931fce63b8a316add1e9301e1ff24e6fa4d1f9ebfd69c8501c
-
SSDEEP
3072:6Kt6k9Pn2wpUcwXW9rldqHpyOGHDhvK3xW:6zk9vO3uUpy5Sh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1.exe
Files
-
1.exe.exe windows:5 windows x86 arch:x86
25c65336e000a6b3739954f95fbaab87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrW
SetEndOfFile
LocalCompact
CreateHardLinkA
GetModuleHandleW
EnumResourceTypesA
LoadLibraryW
ReadConsoleInputA
IsBadCodePtr
CreateEventA
GetModuleFileNameW
GetACP
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
AttachConsole
CreateJobSet
FindResourceA
LocalAlloc
AddAtomW
EnumResourceNamesA
GetFileTime
ReleaseMutex
GetDiskFreeSpaceExW
TerminateJobObject
GetWindowsDirectoryW
CheckRemoteDebuggerPresent
CloseHandle
CreateFileW
FlushFileBuffers
GetStringTypeW
LCMapStringW
LoadLibraryA
CreateFileA
MultiByteToWideChar
WriteConsoleW
HeapAlloc
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
WriteFile
GetStdHandle
HeapCreate
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
HeapReAlloc
SetStdHandle
RaiseException
user32
GetMessageTime
GetKeyboardLayout
CharUpperBuffA
SetCursorPos
LoadMenuW
GetCaretPos
GetSysColorBrush
GetSystemMetrics
advapi32
ClearEventLogW
ole32
CoUnmarshalHresult
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 147KB - Virtual size: 28.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ