Static task
static1
Behavioral task
behavioral1
Sample
86feefd56177314e8cd6b5b524102e10N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
86feefd56177314e8cd6b5b524102e10N.exe
Resource
win10v2004-20240709-en
General
-
Target
86feefd56177314e8cd6b5b524102e10N.exe
-
Size
68KB
-
MD5
86feefd56177314e8cd6b5b524102e10
-
SHA1
16304e95662ddc951236ef4b6c6d39ab022d7d36
-
SHA256
91fed59ae7f8d7cdd0eff660c6fc4863120710c11cb648592efb378706d87be6
-
SHA512
5821f9ed1ef63bf6bea8d583907d8606a134899d010e04dcbb6107fd5eade5a6a141c36f97e4b340e4142213ffaeda95fef545fc67b57b60d5051fdbdec78830
-
SSDEEP
1536:HZHwsCub7riF0qXyvTk9FHedKxGldlcZ+/:UFViHdlcZ+/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86feefd56177314e8cd6b5b524102e10N.exe
Files
-
86feefd56177314e8cd6b5b524102e10N.exe.exe windows:4 windows x86 arch:x86
d663c84ac713b47e7f2f461436614432
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetTempFileNameA
CreateFileA
VirtualAlloc
GetFileSize
ReadFile
SetFilePointer
WriteFile
VirtualFree
CloseHandle
CreateProcessA
WaitForSingleObject
DeleteFileA
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
LCMapStringW
LCMapStringA
lstrcatA
lstrlenA
GetVolumeInformationA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapDestroy
HeapCreate
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetOEMCP
GetCPInfo
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleFileNameA
advapi32
CryptAcquireContextA
CryptGetHashParam
CryptHashData
CryptCreateHash
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
CryptReleaseContext
shell32
ShellExecuteA
wininet
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
urlmon
URLDownloadToCacheFileA
user32
wsprintfA
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE