Static task
static1
Behavioral task
behavioral1
Sample
696af24275cc325eba51d967a2c79ed0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
696af24275cc325eba51d967a2c79ed0N.exe
Resource
win10v2004-20240802-en
General
-
Target
696af24275cc325eba51d967a2c79ed0N.exe
-
Size
752KB
-
MD5
696af24275cc325eba51d967a2c79ed0
-
SHA1
4c3227aa6b1573f88ac7a18386bde0cf2c8d66a5
-
SHA256
40ac8b26c4f915d13753127da9c0b2ed682dd6c1e9a5e2e2ad66e9d878fe04c5
-
SHA512
ab01f8c886c34713cfb1e5d38143f6a4ad36caf9c81a3c6381ffed250f6ddb449a83f7eb1d5835ac577faf1a92e2caba5d5a22b978ab4a5766b61d214b3969a9
-
SSDEEP
12288:4Bf5DPoj3c7BArFYujXD1P+XTey0BkavxWOLQEMIqvrmZ08gF0VplSj:ePogNADjz1PeT5SXvTQEMIGrme8gF0Va
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 696af24275cc325eba51d967a2c79ed0N.exe
Files
-
696af24275cc325eba51d967a2c79ed0N.exe.exe windows:4 windows x86 arch:x86
bef147b1401deaaa1756ba01438db84e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetFileAttributesA
SetEndOfFile
LCMapStringA
GetStringTypeW
LCMapStringW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FileTimeToSystemTime
FindClose
SetThreadPriority
OpenMutexA
CreateMutexA
GetVersionExA
CloseHandle
GetLastError
OutputDebugStringA
GetDriveTypeA
GetVolumeInformationA
GetWindowsDirectoryA
GetCommandLineA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WritePrivateProfileStringA
FreeEnvironmentStringsA
GetStdHandle
HeapSize
TerminateProcess
GetPrivateProfileStringA
Sleep
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FindFirstFileA
DeleteFileA
GetFullPathNameA
GetCurrentDirectoryA
RaiseException
WaitForSingleObject
TerminateThread
GetStringTypeA
UnhandledExceptionFilter
WriteFile
GetFileType
GetModuleHandleA
GetProcAddress
SetHandleCount
SetFilePointer
ReadFile
TlsGetValue
SetLastError
GetTickCount
WideCharToMultiByte
IsBadWritePtr
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetCurrentThreadId
VirtualAlloc
VirtualFree
LoadLibraryA
CreateThread
GetLocalTime
TlsAlloc
GetACP
HeapFree
HeapAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
ExitProcess
TlsSetValue
ExitThread
GetStartupInfoA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
user32
LoadCursorA
CreateWindowExA
ShowWindow
MessageBoxA
InvalidateRect
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
ShowCursor
DestroyWindow
GetWindowPlacement
SetCursorPos
SetWindowLongA
GetDC
ReleaseDC
GetClientRect
ClientToScreen
LoadIconA
PostMessageA
RegisterClassA
GetSystemMetrics
SetRect
SetWindowPos
SetFocus
DefWindowProcA
AdjustWindowRectEx
WINNLSEnableIME
GetCursorPos
SendMessageA
wsprintfA
ScreenToClient
gdi32
CreateDIBSection
GetDeviceCaps
GetStockObject
CreateCompatibleDC
TextOutA
DeleteDC
StretchBlt
CreateFontA
DeleteObject
SelectObject
SetBkMode
SetTextColor
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitialize
ddraw
DirectDrawCreate
winmm
timeGetTime
imm32
ImmNotifyIME
ImmSetCompositionStringA
ImmGetContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmReleaseContext
ImmGetCompositionStringA
Sections
s05 Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
s03 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
s01 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s04 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
s02 Size: 344KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE