Static task
static1
Behavioral task
behavioral1
Sample
038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1.exe
Resource
win10v2004-20240709-en
General
-
Target
038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1.exe
-
Size
459KB
-
MD5
40bd8eece6c2df0090cd6df777ce2fa2
-
SHA1
5d30f5564dc1ffa05633702d14b4f3db785c02d9
-
SHA256
038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1
-
SHA512
dc7ecb5dbc533d33160daa77a797a7c6daab566f25b643a99f3a2059241888869189ea49c5e5010b88068526d09c1d9ef019e14aa2b0811689b854d746ce3b6b
-
SSDEEP
12288:vP7fkVEIkoUrRGIZotZ5ISt9tUe4pV1Bb1qdu8M:XzkVEIk/RGIZob5lw1BBqdu8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1.exe
Files
-
038a9db221b4311aa9b3674731df7ccf091015beacb477a5f31cabb393af71a1.exe.exe windows:4 windows x86 arch:x86
e30b2e6c0cf1bf03e5548466056e2917
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetTextExtentPoint32A
SelectObject
CreateFontIndirectA
CreateCompatibleDC
GetObjectA
DeleteDC
user32
wsprintfA
CharNextExA
SendMessageA
CharNextA
CharPrevA
IsWindow
GetDC
MapDialogRect
DestroyWindow
CreateDialogIndirectParamA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetLocaleInfoW
SetEndOfFile
GetExitCodeProcess
SetStdHandle
SetEnvironmentVariableA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
MulDiv
CreateEventA
CloseHandle
ResetEvent
WaitForSingleObject
SetEvent
WaitForMultipleObjects
CreateThread
GetModuleHandleA
FindClose
FindNextFileA
FindFirstFileA
IsValidCodePage
SetPriorityClass
GetCurrentProcess
OpenEventA
GetSystemInfo
CreateFileMappingA
CreateFileA
GetTempFileNameA
GetTempPathA
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GlobalFree
GlobalAlloc
GetCurrentDirectoryA
CreateProcessA
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
GetProcAddress
HeapFree
RtlUnwind
RaiseException
GetLastError
DeleteFileA
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
SetConsoleCtrlHandler
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
WriteFile
ReadFile
SetFilePointer
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LoadLibraryA
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
SetCurrentDirectoryA
Sections
.text Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE