Static task
static1
Behavioral task
behavioral1
Sample
22bfc2fcbca23aa128ce2e43580850b4dcfd249a0a3bc283a087a77ab8965f14.exe
Resource
win7-20240704-en
General
-
Target
22bfc2fcbca23aa128ce2e43580850b4dcfd249a0a3bc283a087a77ab8965f14.exe
-
Size
273KB
-
MD5
f10d9e7ad6c6bc87f96a796a36d5c36f
-
SHA1
7fbe22e16787464766f3119a3e21a77b6f73c2a3
-
SHA256
22bfc2fcbca23aa128ce2e43580850b4dcfd249a0a3bc283a087a77ab8965f14
-
SHA512
2e30174b055ffcf506c9d68fac202c57ba536e79ea905f4ac998325685525c638a21ae2885805d07a93b64926111dad0b5589866493df752266bfca1f696d881
-
SSDEEP
3072:D1rpcJdKPtSsGfiAQa3qfN/+s2jbLAU4dMt0IB+pEzbIVETl:EgtSsGfiAX3AfN5dMtptT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22bfc2fcbca23aa128ce2e43580850b4dcfd249a0a3bc283a087a77ab8965f14.exe
Files
-
22bfc2fcbca23aa128ce2e43580850b4dcfd249a0a3bc283a087a77ab8965f14.exe.exe windows:5 windows x86 arch:x86
822d07f4930ae04669596bbc1d171bad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumberFormatA
EnumTimeFormatsW
GetConsoleCP
GlobalAlloc
LoadLibraryW
FatalAppExitW
HeapValidate
ReplaceFileW
GetModuleFileNameW
GetSystemDirectoryA
GlobalUnlock
LCMapStringA
GetConsoleAliasesW
GetLastError
SetLastError
GetProcAddress
IsBadHugeWritePtr
CreateJobSet
LoadLibraryA
CreateFileMappingA
SetConsoleCtrlHandler
AddAtomA
CreateNamedPipeW
SetEnvironmentVariableA
GetOEMCP
EnumDateFormatsA
GetModuleHandleA
EnumResourceNamesA
PeekConsoleInputA
SetProcessShutdownParameters
SetFileShortNameA
GetDiskFreeSpaceExW
GetCurrentProcessId
HeapSize
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetTickCount
GetProcessPriorityBoost
CreateFileA
CreateJobObjectW
HeapWalk
EnumResourceNamesW
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
SetFilePointer
HeapCreate
HeapFree
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
Sleep
RaiseException
GetConsoleMode
RtlUnwind
ReadFile
CreateFileW
user32
ChangeMenuW
GetMessageExtraInfo
ChangeMenuA
CharUpperBuffA
GetMenuState
DrawStateW
GetSysColorBrush
WindowFromDC
GetComboBoxInfo
SetCaretPos
gdi32
CreateDCA
CreateDCW
GetCharWidthI
advapi32
ClearEventLogW
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.waweti Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pugomi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ