DllGetVersion
Static task
static1
Behavioral task
behavioral1
Sample
69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd.exe
Resource
win10v2004-20240730-en
General
-
Target
69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd.exe
-
Size
11.0MB
-
MD5
4465616bf6c689971de749cc3176a3ed
-
SHA1
413e182c969523c7f126ca47d76f723e04e60577
-
SHA256
69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd
-
SHA512
bd70a59cb15b2e4b2968d7cf07ca573bce7834d15bf2486cd013f622f672d8412419fbbc2653b184ded25b0eb939e53d1a6fc1dc4a412a7d3209b068b57bdd96
-
SSDEEP
3072:ywhlNR5hRSR20Yd6mTkt7t0ZmTaTJSYvd+mT2VFxRdqwvl6nDtGp7A3sCG9MDVkn:ZT5Hd6mTc64TeJS+dOzqOlgt3sCLGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd.exe
Files
-
69a1df86055351c7aa0511e52acf16ff6bd954a82a2d82448bbee3c414b8b3bd.exe.exe windows:5 windows x64 arch:x64
d9559bfb40feeb2830a21f803e8df96c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetUserDefaultUILanguage
ExpandEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
GetLastError
GetModuleHandleExW
IsWow64Process
FlushFileBuffers
SetStdHandle
CreateFileW
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
DeactivateActCtx
ReleaseActCtx
LCMapStringW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameA
GetFileType
GetStdHandle
GetProcessHeap
GetModuleHandleW
GetStartupInfoW
TlsFree
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
SetLastError
GetCPInfo
GetOEMCP
HeapReAlloc
ActivateActCtx
CreateActCtxW
GetFileAttributesW
CreateProcessW
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
GetCurrentProcess
FreeLibrary
GetModuleFileNameW
LoadLibraryW
CreateMutexW
CloseHandle
Sleep
WaitForSingleObject
ReleaseMutex
GetProcAddress
WriteConsoleW
LoadLibraryExW
GetACP
IsValidCodePage
HeapSize
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
HeapAlloc
HeapFree
GetCommandLineA
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsDebuggerPresent
VirtualAlloc
user32
DispatchMessageW
GetMessageW
wsprintfW
TranslateMessage
PostMessageW
LoadStringW
GetWindowThreadProcessId
GetDesktopWindow
GetWindowRect
SetWindowTextW
ReleaseDC
GetDC
SetForegroundWindow
GetForegroundWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
SetWindowPos
AttachThreadInput
SendMessageW
FindWindowW
CreateWindowExW
RegisterClassW
PostQuitMessage
DefWindowProcW
gdi32
GetDeviceCaps
advapi32
RegCreateKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Exports
Exports
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ