Static task
static1
Behavioral task
behavioral1
Sample
baa00f799b283241d4aae807252ee300N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
baa00f799b283241d4aae807252ee300N.exe
Resource
win10v2004-20240709-en
General
-
Target
baa00f799b283241d4aae807252ee300N.exe
-
Size
417KB
-
MD5
baa00f799b283241d4aae807252ee300
-
SHA1
728130b299ce8bc83c67517e73270a624270582b
-
SHA256
de1f53ce728e6fd608af81fe4910adeff7b9bd338d6b97a6728cc67b53679371
-
SHA512
8116cbe8b4909a4b43230f32bca033dbe266cff1acb629e044fa1dc2e677b8ac72901be4e2c5e90dff14e08ab8e997d5e1bab8dd2e9a3c7b4fd7ea2c728c6a72
-
SSDEEP
6144:g3ZVomM8IiN5IiuHOjhoiAOYfQZczyUdonn5:EEx8IiLRjbK+0onn5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa00f799b283241d4aae807252ee300N.exe
Files
-
baa00f799b283241d4aae807252ee300N.exe.exe windows:5 windows x86 arch:x86
73429057df7d837dde194fa1348d41e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
FindClose
CloseHandle
GetLocalTime
lstrcmpiA
CreateMutexA
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleA
FindResourceA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTempFileNameA
CreateDirectoryA
GetFullPathNameA
DeleteFileA
FindFirstFileA
FindNextFileA
CopyFileA
MoveFileA
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteConsoleW
SetStdHandle
LeaveCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetFileAttributesExW
SetFilePointerEx
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnterCriticalSection
SetLastError
GetLastError
GetCurrentThreadId
RaiseException
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapReAlloc
HeapSize
GetACP
WriteFile
DecodePointer
IsDebuggerPresent
OutputDebugStringW
EncodePointer
HeapAlloc
HeapFree
GetProcessHeap
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
RtlUnwind
LoadLibraryExW
GetSystemInfo
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetStdHandle
SetEndOfFile
user32
GetClientRect
SendMessageA
DefWindowProcA
UnregisterClassA
IsWindow
DestroyWindow
GetMonitorInfoA
MonitorFromWindow
LoadImageA
GetWindow
GetParent
SetWindowLongA
GetWindowLongA
MapWindowPoints
SetWindowPos
GetWindowRect
MessageBoxA
GetSystemMetrics
SetFocus
CharNextA
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamA
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ