Static task
static1
Behavioral task
behavioral1
Sample
a09d295a9bf54a4b06fa8ea496c75b60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a09d295a9bf54a4b06fa8ea496c75b60N.exe
Resource
win10v2004-20240802-en
General
-
Target
a09d295a9bf54a4b06fa8ea496c75b60N.exe
-
Size
7.2MB
-
MD5
a09d295a9bf54a4b06fa8ea496c75b60
-
SHA1
8408d501dd0594672b82fba91412b1a5def1dd75
-
SHA256
e7509f90afd70bc22980233f715f1c2dec6641ffbb61f37260fcd029cade2fb0
-
SHA512
b1b3e1074614993aad71245ae4b52d6b3b06cf35cfeb17a7118c32af6f6dbe0c69e913d23fcfeb57a25fb4085a921d74e538576287db28c65481d60d43aa8ef5
-
SSDEEP
98304:XrcYHP/Ix9ndTW1TTCa8RXjQi3PdC+stuMvmztd5VuNylENewbgadmWcFgfcDltY:XrcYHP/MnpD1Q+gm+L0Sv+Iv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a09d295a9bf54a4b06fa8ea496c75b60N.exe
Files
-
a09d295a9bf54a4b06fa8ea496c75b60N.exe.exe windows:4 windows x64 arch:x64
7e95906e87b355cb7a19ac1258d95505
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
AddVectoredExceptionHandler
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FormatMessageW
FreeLibrary
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcessId
GetEnvironmentVariableW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemInfo
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MoveFileExW
MultiByteToWideChar
QueryPerformanceCounter
RemoveVectoredExceptionHandler
SearchPathW
SetConsoleCtrlHandler
SetConsoleOutputCP
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
__iob_func
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_assert
_cexit
_commode
_close
_errno
_fmode
_findclose
_get_osfhandle
_initterm
_lseeki64
_nextafter
_onexit
_read
_putenv
_setmode
_vscprintf
_vscwprintf
_vsnprintf
_vsnwprintf
_wchdir
_wcmdln
_wgetcwd
_wfindfirst64
_wfindnext64
_wgetenv
_wopen
_write
_wstat64
_wsystem
_wunlink
abort
acos
asin
atan
bsearch
calloc
clock
cosh
exit
fflush
fprintf
fputc
fputs
free
frexp
fwrite
localeconv
log10
malloc
memcmp
memcpy
memmove
memset
printf
puts
realloc
setlocale
signal
sinh
sprintf
strcmp
strcpy
strerror
strlen
strncmp
strtol
swscanf
tan
tanh
vfprintf
wcscmp
wcslen
wcsstr
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
WSAGetLastError
recv
send
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exptbl Size: 551KB - Virtual size: 551KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 65KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/4 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/106 Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ