Static task
static1
Behavioral task
behavioral1
Sample
4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral2
Sample
4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51.exe
Resource
win11-20240709-en
General
-
Target
4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51
-
Size
639KB
-
MD5
4f0a06ebd51f68b658893dd0cc2080f2
-
SHA1
4f42493a2a1c1159abfaad68fe5bdca6713e7b73
-
SHA256
4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51
-
SHA512
f6dd29e187ea113dd5db697971fc7a0910fb050a3195e6a452064b1681208891e98f301bda928301a3a2298559d7476dc6dfb8065b16b6cb2ac5c1bca124e132
-
SSDEEP
12288:vdEfq1ur9txdefiuRirpJIpYNqUfMIYT:mqgrXn4iuSpJIpYJUIYT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51
Files
-
4133ec19d32cddd0523b9bc0c3590d206d2bb280eb1c52de9bc9cc9033abcf51.exe windows:5 windows x86 arch:x86
1bf8ebf879fee654fc9a3ea11df395e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
LocalCompact
CreateHardLinkA
LoadLibraryW
ReadConsoleInputA
FreeConsole
IsBadCodePtr
IsBadStringPtrA
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
CreateJobSet
LoadLibraryA
LocalAlloc
AddAtomW
CreateEventW
HeapLock
HeapCompact
GetModuleFileNameA
GetOEMCP
GetCurrentDirectoryA
GetFileTime
Module32NextW
GetDiskFreeSpaceExW
TerminateJobObject
DebugBreak
CloseHandle
CreateFileW
FlushFileBuffers
GetStringTypeW
LCMapStringW
EnumResourceTypesW
EnumResourceNamesW
WriteConsoleW
SetStdHandle
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
ReadFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
HeapSize
HeapReAlloc
RaiseException
user32
GetMessageTime
GetKeyboardLayout
CharUpperBuffA
SetCursorPos
LoadMenuW
GetSysColorBrush
GetSystemMetrics
SetCaretPos
gdi32
GetCharWidthW
ole32
CoUnmarshalHresult
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 147KB - Virtual size: 28.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.baco Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wiroraf Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ