Static task
static1
Behavioral task
behavioral1
Sample
76a5c8d6c61a11db15c4f62d36916c10N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76a5c8d6c61a11db15c4f62d36916c10N.exe
Resource
win10v2004-20240709-en
General
-
Target
76a5c8d6c61a11db15c4f62d36916c10N.exe
-
Size
501KB
-
MD5
76a5c8d6c61a11db15c4f62d36916c10
-
SHA1
84fce05c257dc2a1d54bcfebc7fb3e4bb110b522
-
SHA256
58a5c11a5e41f314f45307e9bf7d2528b4814f8e64eea4220a30d802265bad7f
-
SHA512
5d87bbc5c0aeb52e5b099f3ddc67ba6b7049cc74d5eb4029d61155727f11aaf595adf71acfcd2594ba2a96744269fbdec7285174116b2b5a64f1d6f8b6edccda
-
SSDEEP
12288:dNb6O/Ah3U0DXHZvRHl/u8defXN4h39dPX+fANPubps:d54dxTvo8defX+hXPX+fANP2p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76a5c8d6c61a11db15c4f62d36916c10N.exe
Files
-
76a5c8d6c61a11db15c4f62d36916c10N.exe.exe windows:4 windows x86 arch:x86
aa354dac41c77b713c5d218ee38e4c45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GopherOpenFileA
GetUrlCacheConfigInfoW
UrlZonesDetach
GetUrlCacheGroupAttributeW
InternetSetDialStateW
InternetCombineUrlA
kernel32
UnlockFileEx
SetConsoleWindowInfo
InterlockedIncrement
SetStdHandle
HeapCreate
LocalFree
GetTickCount
GetDateFormatW
OpenMutexA
CreateMutexA
CompareStringW
MultiByteToWideChar
VirtualFree
GetTimeZoneInformation
WriteConsoleOutputCharacterA
GetProcAddress
lstrcpy
UnhandledExceptionFilter
LCMapStringA
HeapDestroy
GetLastError
HeapReAlloc
VirtualQuery
FreeEnvironmentStringsA
FlushFileBuffers
InterlockedExchange
GetVersion
SetFilePointer
GetCompressedFileSizeA
GetStartupInfoW
ReadConsoleW
GetCurrentThread
TlsFree
GetModuleFileNameA
GetEnvironmentStringsW
FindFirstFileExA
GetFileType
GetCurrentProcess
LeaveCriticalSection
GetFullPathNameA
SetEnvironmentVariableA
LoadLibraryExW
FreeEnvironmentStringsW
SetThreadAffinityMask
SetHandleCount
TlsGetValue
InterlockedDecrement
GetCommandLineA
GetModuleHandleA
HeapFree
VirtualAllocEx
GetSystemTime
WriteConsoleOutputW
LoadLibraryA
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
ExitProcess
HeapAlloc
SetLastError
GetStringTypeW
GetCPInfo
GetStringTypeA
WriteConsoleOutputAttribute
LCMapStringW
GetConsoleTitleA
GetCommandLineW
ReadFile
FlushViewOfFile
GetLocalTime
GetSystemDirectoryA
TlsSetValue
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentProcessId
TlsAlloc
GetEnvironmentStrings
GetStartupInfoA
RtlUnwind
DeleteCriticalSection
CloseHandle
WriteFile
GetFileAttributesExA
TerminateProcess
CompareStringA
GlobalFix
IsBadWritePtr
WideCharToMultiByte
GetStdHandle
VirtualAlloc
EnterCriticalSection
comctl32
InitCommonControlsEx
advapi32
DuplicateTokenEx
StartServiceW
RegQueryInfoKeyW
CryptImportKey
CryptGetKeyParam
CryptSetProviderA
DuplicateToken
RegDeleteValueA
gdi32
PolyTextOutW
CloseEnhMetaFile
FloodFill
CreateScalableFontResourceA
EnumICMProfilesW
StrokePath
RectVisible
GetTextExtentPointA
EnumMetaFile
SetWindowExtEx
GetTextMetricsA
DeviceCapabilitiesExA
ExtTextOutW
CreateDIBPatternBrush
CreateBrushIndirect
CreateFontA
SetBkMode
GetICMProfileW
GetCharWidthFloatA
FillPath
GetKerningPairsA
comdlg32
LoadAlterBitmap
GetFileTitleW
GetOpenFileNameA
user32
GetThreadDesktop
DrawStateW
RegisterClassA
DrawTextExA
CharToOemBuffA
GetKeyboardLayoutNameW
GetTabbedTextExtentA
DrawFrame
InsertMenuItemA
CreateIcon
TranslateMessage
SetParent
GetMenuDefaultItem
TrackPopupMenu
DefMDIChildProcA
MsgWaitForMultipleObjectsEx
CharUpperBuffW
RegisterClassExA
MessageBeep
IsWindowUnicode
IsWindowEnabled
EnumDisplaySettingsW
EnumDesktopsA
DdeAccessData
PaintDesktop
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ