Static task
static1
Behavioral task
behavioral1
Sample
89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff.exe
Resource
win10v2004-20240709-en
General
-
Target
89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff
-
Size
334KB
-
MD5
067628919c927e2b73e4dce82eee4d6b
-
SHA1
ceda8ca52d22272e628c3b23a04437337941775c
-
SHA256
89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff
-
SHA512
3aae1c1ca3f9aab8b591065f7ce6e70cd9e560708eb0312a52d01960f0a2828d80218c63335db9becc38994e260bc6ef1948722bcfb00bc6f30b1e4d36c74284
-
SSDEEP
6144:Z9S88j2xzFyfIEcQKMTF+O4tlggsxSJb21rwdPT1rm1MWVUbc/gt/cw/9:ZBpxjO4H3NPi/gym9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff
Files
-
89889892e786fbf89beb60bf0cac56529b7c4b0feb49902ccbb7b7f496ddb4ff.exe windows:4 windows x86 arch:x86
bbc9029928dccc9dea28c7a0c1b62cc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AccessCheck
kernel32
CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetCommandLineA
GetCurrentProcess
GetCurrentThread
GetDriveTypeA
GetLastError
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetConsoleCursorPosition
SetPriorityClass
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
msvcrt
_close
_ecvt
_fcvt
_fdopen
_fstat
_gcvt
_isatty
_lseek
_open
_read
_setmode
_stat
_strdup
_stricoll
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_exit
_filbuf
_flsbuf
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_tzset
abort
atexit
atoi
calloc
exit
fclose
fflush
fgets
fopen
fputc
free
fseek
fwrite
getenv
gmtime
localtime
malloc
mbstowcs
memcpy
memmove
putchar
puts
realloc
rewind
setbuf
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
tolower
vfprintf
wcstombs
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ