Static task
static1
Behavioral task
behavioral1
Sample
817c6c2027a86a010e1787c33abfe620N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
817c6c2027a86a010e1787c33abfe620N.exe
Resource
win10v2004-20240709-en
General
-
Target
817c6c2027a86a010e1787c33abfe620N.exe
-
Size
445KB
-
MD5
817c6c2027a86a010e1787c33abfe620
-
SHA1
f4c2e6b7c058975d80f0021a39246d446510eaa1
-
SHA256
207a1be97f7e2fc8d9045e33c3673611f45bb78ea241ef8ababe09c6bd3a77fc
-
SHA512
d54ca0f6a4fa80d0130d079d7c1ff955904c4e669fc87f0ee9206f2cb7961541c575f0bdbf2aab242c7c0fbc7eae69a06c5f79d7b3393a4e0598b6f657931091
-
SSDEEP
12288:suByZHzvj7HXkS5KEQZJvzyyXxYT2guGl:sxDj73b5KEYJvzyyXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 817c6c2027a86a010e1787c33abfe620N.exe
Files
-
817c6c2027a86a010e1787c33abfe620N.exe.exe windows:4 windows x86 arch:x86
1b391f8725467d74adeb717f51fe7119
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetLocaleInfoA
HeapDestroy
WritePrivateProfileSectionW
RtlUnwind
GetOEMCP
FindFirstFileExW
GetCurrentProcess
GetEnvironmentStrings
VirtualAlloc
InterlockedDecrement
GetVersionExA
HeapReAlloc
GetCPInfo
FillConsoleOutputAttribute
GetACP
CompareStringA
WideCharToMultiByte
GetModuleFileNameA
DeleteCriticalSection
GetModuleFileNameW
VirtualFree
FreeEnvironmentStringsA
GetLocaleInfoW
TlsSetValue
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetProcessShutdownParameters
GetStringTypeW
QueryPerformanceCounter
SetEnvironmentVariableA
IsValidLocale
WriteFile
IsValidCodePage
MultiByteToWideChar
GetPrivateProfileStructA
HeapAlloc
GetCurrentThread
HeapFree
GetFileType
TlsFree
GetCurrentProcessId
GetThreadContext
GetProcessHeap
TlsGetValue
LCMapStringW
GetStringTypeA
UnmapViewOfFile
FreeEnvironmentStringsW
GetStartupInfoA
CompareStringW
SetUnhandledExceptionFilter
LCMapStringA
GetConsoleTitleW
SetEnvironmentVariableW
TlsAlloc
Sleep
SetLastError
VirtualUnlock
GetProfileSectionW
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemDirectoryA
CreateMutexW
GetStdHandle
GetProcAddress
FreeLibrary
GetCommandLineA
GetCommandLineW
HeapCreate
InterlockedExchange
GetTimeFormatA
SetHandleCount
GetDateFormatA
VirtualQuery
SetConsoleCtrlHandler
LeaveCriticalSection
ExpandEnvironmentStringsW
HeapSize
GetCurrentThreadId
GetTimeZoneInformation
GetProfileSectionA
TerminateProcess
EnumSystemLocalesA
GetUserDefaultLCID
OpenMutexA
GetModuleHandleA
InterlockedIncrement
GetLastError
GetStartupInfoW
LockFileEx
ExitProcess
InitializeCriticalSection
FlushViewOfFile
gdi32
DeviceCapabilitiesExA
StrokePath
GetLayout
GetColorSpace
LineDDA
UnrealizeObject
ExtFloodFill
EnumObjects
GetPath
SetPixel
CreateScalableFontResourceA
CreatePenIndirect
CreateMetaFileW
PolylineTo
CreateBitmapIndirect
GetObjectType
GdiPlayScript
GetEnhMetaFileDescriptionW
SetBoundsRect
GetBrushOrgEx
ExtCreateRegion
GetRandomRgn
PolyDraw
SetDeviceGammaRamp
wininet
HttpEndRequestA
FindNextUrlCacheContainerW
GopherGetAttributeA
FtpCommandW
InternetQueryDataAvailable
InternetReadFile
ShowClientAuthCerts
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ