Static task
static1
Behavioral task
behavioral1
Sample
230fb47bed8227fa05ad94911e2b2186df279ef570e63b89ede27377a6c321fe.exe
Resource
win7-20240704-en
General
-
Target
230fb47bed8227fa05ad94911e2b2186df279ef570e63b89ede27377a6c321fe.exe
-
Size
154KB
-
MD5
edba6ce6b880c14cc8cddbe0488a36ee
-
SHA1
a38d7ae21fb4b4e0ca3eac6cce2aa580c2d4f27a
-
SHA256
230fb47bed8227fa05ad94911e2b2186df279ef570e63b89ede27377a6c321fe
-
SHA512
4d1a1575d9e76b49b99abf80bdf1723578eaeedbcda30699f9464c7a2df27bb018410b4e4057b2d643a80ad9ec833b2a2c0a68f571dcee0a4aa673da68f5e84b
-
SSDEEP
3072:0riD0hyFAsTNbB3c7bqLSigKqrraF6q7JFrsTJOrEuGCH:0riD0EFvblcP2SbKBprrsTJQEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230fb47bed8227fa05ad94911e2b2186df279ef570e63b89ede27377a6c321fe.exe
Files
-
230fb47bed8227fa05ad94911e2b2186df279ef570e63b89ede27377a6c321fe.exe.exe windows:6 windows x86 arch:x86
3570c1f1de7d8861522e180a0c4b5ad2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
CloseHandle
GetLastError
SetLastError
WaitForSingleObject
ExitProcess
TerminateProcess
GetExitCodeProcess
ResumeThread
CreateProcessW
VirtualAllocEx
VirtualProtectEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
IsWow64Process
GetCurrentProcess
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetCurrentThreadId
DecodePointer
LocalFree
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCPInfo
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
LCMapStringW
GetProcessHeap
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�n��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE