Static task
static1
Behavioral task
behavioral1
Sample
b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210(1).exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210(1).exe
Resource
win10v2004-20240730-en
General
-
Target
b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210(1)
-
Size
458KB
-
MD5
8bf2696aceff7ca6512b0f9622c02b3d
-
SHA1
4a712d9e84f047ad7acd9c1ea3be37184216e0af
-
SHA256
b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210
-
SHA512
419792c4b6d3f3429f2b8985c4a6370f2dfe9d5fe79f2e4d33743fc570d60da0839063212606f3e8933c2a9e12db7e0dc92e0218b4702dbe1886e4d484ed64ef
-
SSDEEP
6144:n/E8DIpjK28t4snQVlp3z/pSZ+pDKpf9EkQbKxVK+PXItNOapG8RuzRiRh3Zb:REpj7snSv/cgu4VGn6OaM+ucj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210(1)
Files
-
b542b29e51e01cec685110991acf28937ad894ba30dc8e044ef66bb8acbed210(1).exe windows:4 windows x86 arch:x86
3b9bd7506afb99a387923d87b403a8ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
gdi32
FillRgn
FillPath
SetBkMode
GetObjectType
TextOutW
PtVisible
CreateRectRgn
ExtCreatePen
CreateFontIndirectA
ExtCreateRegion
CreateRectRgnIndirect
CreateEnhMetaFileW
SetWorldTransform
CreatePatternBrush
PolyBezierTo
CreatePalette
GetWindowOrgEx
GetEnhMetaFileHeader
EndPath
CombineRgn
CombineTransform
Polyline
GetViewportOrgEx
Rectangle
GetClipRgn
IntersectClipRect
DPtoLP
GetDeviceCaps
CloseEnhMetaFile
GetROP2
Arc
Chord
GetTextColor
AbortDoc
GetObjectW
PtInRegion
RestoreDC
GetTextExtentExPointW
GetRgnBox
ResizePalette
Polygon
MaskBlt
EqualRgn
SetViewportOrgEx
SetDIBColorTable
GetTextExtentPoint32W
GetDIBits
OffsetRgn
PathToRegion
StartDocW
GetCurrentObject
SetGraphicsMode
LineTo
RectVisible
GetTextMetricsW
GetNearestColor
ExcludeClipRect
DeleteDC
SetMetaFileBitsEx
CreateSolidBrush
DeleteEnhMetaFile
GetBkColor
CreatePolygonRgn
SetMapMode
CreateFontIndirectW
EndDoc
GetWorldTransform
SelectPalette
GetCharacterPlacementW
CreateEllipticRgn
SetWindowExtEx
CopyEnhMetaFileW
GetMapMode
SetROP2
GetEnhMetaFileDescriptionW
BitBlt
SetBkColor
CreateMetaFileW
GetBkMode
SetWinMetaFileBits
CreateDIBSection
EnumFontsW
SelectObject
UnrealizeObject
StretchBlt
ArcTo
PolyBezier
MoveToEx
DeleteMetaFile
EndPage
SetDIBits
SetStretchBltMode
CreateCompatibleBitmap
BeginPath
CreatePen
GetBitmapBits
SetWindowOrgEx
RealizePalette
AngleArc
FrameRgn
CreateBitmap
SetRectRgn
GetStockObject
PlayEnhMetaFile
LPtoDP
GetWinMetaFileBits
GetClipBox
DeleteObject
GetRandomRgn
SetTextColor
SaveDC
CreateHalftonePalette
ExtFloodFill
CloseMetaFile
SetAbortProc
SetTextJustification
SetEnhMetaFileBits
kernel32
GetSystemInfo
HeapCreate
VirtualQuery
OutputDebugStringA
WaitForSingleObject
HeapDestroy
CreateEventW
ExitProcess
WideCharToMultiByte
OutputDebugStringW
CreateFileW
ReadFile
CloseHandle
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
InterlockedIncrement
GetModuleFileNameW
lstrlenW
HeapFree
MulDiv
GetProcessHeap
HeapAlloc
VirtualProtect
HeapSize
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionAndSpinCount
msimg32
GradientFill
user32
ReleaseDC
GetDC
GetSystemMetrics
winmm
sndPlaySoundW
timeGetTime
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ