Static task
static1
Behavioral task
behavioral1
Sample
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da.exe
Resource
win10v2004-20240802-en
General
-
Target
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da.exe
-
Size
248KB
-
MD5
0639b68b2f8e8eef306bb4bc85ca35e7
-
SHA1
5750d171a28960a3646bd10bff1c30526d9fb4aa
-
SHA256
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da
-
SHA512
67f4237355f7e6e76f7156554d61b03d5559bdf9fce86fb5a22cc209c87582ea532c7630547d9cceaadc413debe466103ce747bf5593b2c7afcc8a0acad3fdc4
-
SSDEEP
3072:eBCR3mO+D6nudJX2lcCvO42SbVNZ/t6jO7tW0cWAxBF0EUr1r3dJcGTB:Cs3mF6ubGlcCvwglt6jO7jMxlNGT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da.exe
Files
-
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da.exe.exe windows:5 windows x86 arch:x86
22d406bd535905bd7cfc615903cc482b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalCompact
EnumCalendarInfoW
SetEnvironmentVariableW
GetProcessPriorityBoost
GetModuleHandleW
GetTickCount
CreateNamedPipeW
GetConsoleAliasesA
EnumTimeFormatsW
EnumResourceTypesA
GetConsoleCP
GlobalAlloc
GetSystemDirectoryW
SetFileShortNameW
LoadLibraryW
IsProcessInJob
FatalAppExitW
IsBadCodePtr
GetModuleFileNameW
ReplaceFileA
CreateJobObjectA
LCMapStringA
GetLastError
GlobalCompact
FindVolumeMountPointClose
VerLanguageNameW
LoadLibraryA
SetConsoleCtrlHandler
AddAtomA
HeapWalk
GetOEMCP
EnumDateFormatsA
GetModuleHandleA
GetProcessShutdownParameters
EnumResourceNamesA
PeekConsoleInputA
GetDiskFreeSpaceExA
LCMapStringW
HeapSize
GetStringTypeW
WriteConsoleW
FlushFileBuffers
WriteConsoleInputW
HeapCompact
GetProcAddress
CreateFileA
IsProcessorFeaturePresent
SetStdHandle
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
MultiByteToWideChar
ReadFile
ExitProcess
SetFilePointer
HeapCreate
HeapFree
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetConsoleMode
GetCPInfo
GetACP
IsValidCodePage
Sleep
RtlUnwind
CreateFileW
user32
CharUpperBuffA
GetMessageExtraInfo
ChangeMenuA
SetCaretPos
GetMenu
DrawStateW
GetSysColorBrush
DrawMenuBar
gdi32
GetCharWidthI
CreateDCA
GetCharABCWidthsI
winhttp
WinHttpCheckPlatform
msimg32
AlphaBlend
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kizo Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dowo Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ