Static task
static1
Behavioral task
behavioral1
Sample
0888144ca3cdb68e69d535bef3e39320N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0888144ca3cdb68e69d535bef3e39320N.exe
Resource
win10v2004-20240709-en
General
-
Target
0888144ca3cdb68e69d535bef3e39320N.exe
-
Size
145KB
-
MD5
0888144ca3cdb68e69d535bef3e39320
-
SHA1
ee6fb387f01b0c126690137116617869b761d665
-
SHA256
329771c2622381c46d799f49b7263af7a06d4bba59bbafd5f2c3fa452434d9c7
-
SHA512
f9255e17af94d6542c51b7780ba97c43ae2c8f616d1684b14f8415e498bb371235c540480da8b8ff88b772d1f60ef589b19047000f70e1e2536ef6e1684d82e2
-
SSDEEP
1536:w37E9EgEXEjE1EBSggpg768uiNukgPzEWAVBgrDEgVaCeSCTcNy7+LvOp2swkzzl:w3PPWSBgI3w2sxope
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0888144ca3cdb68e69d535bef3e39320N.exe
Files
-
0888144ca3cdb68e69d535bef3e39320N.exe.exe windows:4 windows x64 arch:x64
e49853c33dd34d2513490e19b0cf5a02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
libhsimengine
xsi_base_array_concat
xsi_driver_first_trans_fast
xsi_driver_first_trans_fast_port
xsi_get_engine_memory
xsi_get_transient_memory
xsi_init_design
xsi_process_wait
xsi_register_didat
xsi_register_executes
xsi_register_ieee_std_logic_1164
xsi_register_info
xsi_register_min_prec_unit
xsi_register_resolution_function
xsi_register_subprogram_executes
xsi_register_tops
xsi_report
xsi_run_simulation
xsi_set_current_line
xsi_signal_has_event
xsi_signal_last_value
xsi_type_set_default_value
xsi_vhdl_check_range_of_index
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 1024B - Virtual size: 768B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/35 Size: 41KB - Virtual size: 40KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/47 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/86 Size: 1024B - Virtual size: 721B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/97 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/108 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ