Static task
static1
Behavioral task
behavioral1
Sample
89c38c8b2e3f069e95ca5f827a9a6280N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89c38c8b2e3f069e95ca5f827a9a6280N.exe
Resource
win10v2004-20240709-en
General
-
Target
89c38c8b2e3f069e95ca5f827a9a6280N.exe
-
Size
500KB
-
MD5
89c38c8b2e3f069e95ca5f827a9a6280
-
SHA1
05b9e606f07e41f681a4b64c0cb8e73f17da7703
-
SHA256
4d4c4413d59fe80c0e8e07a4d1c741f04e22c296edb6c9880f6e9e52b1694b36
-
SHA512
cc6f71e1c1536df88f2abe6769a4c1485aa237b9be44f4f3cd8f722a364446189e6b24d37a6305d146a12309721791c6dd3ca55251b12fd7973b4be87d63b27d
-
SSDEEP
6144:HQWCAZq2Rn/j9nm5MqxBjhof9Jc35wbjVI8xz/Xf:HQWlR7eMkBVof9JUwbj28x7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c38c8b2e3f069e95ca5f827a9a6280N.exe
Files
-
89c38c8b2e3f069e95ca5f827a9a6280N.exe.exe windows:4 windows x86 arch:x86
511d62b3225e539e6c416e48fa03ec4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapFree
SetUnhandledExceptionFilter
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
HeapAlloc
HeapReAlloc
VirtualAlloc
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetConsoleCtrlHandler
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetACP
GetOEMCP
ReadFile
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
Sections
.text Size: 428KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ