Static task
static1
Behavioral task
behavioral1
Sample
213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e.exe
Resource
win11-20240802-en
General
-
Target
213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e
-
Size
215KB
-
MD5
e8608554a9465d992e8444855ff15ed0
-
SHA1
cb021dce8b9b6112e9a74bee41bc69b56fd7caa8
-
SHA256
213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e
-
SHA512
263e5446ff5dfaffb0f8cbe5cfd69acaddecac72fc2b0f31d5c9cd9ffa1433997b2782206af4a00735d59e9cf69559974b4dde3aa5a2ced5f20e42f4ba58dbca
-
SSDEEP
3072:wgLM2aVZqfg5Ax0qfdTw0y8RlSEwvTG5CDS5CN/:ZLM2aifg5cd80yqlSEw2mN/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e
Files
-
213d19cef73a01c6e8c7e90c8745604588e8f5ce6ea86365270b5763ef0b9e9e.exe windows:5 windows x86 arch:x86
0b2d8bc7780400d86592669bd146c3d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetFullPathNameA
GetNumaProcessorNode
GetProcessIoCounters
OpenJobObjectA
UnlockFile
GetTimeFormatA
GetModuleHandleW
GetTickCount
GetDateFormatA
GetSystemTimes
GlobalAlloc
LoadLibraryW
FormatMessageW
InitAtomTable
HeapCreate
FlushInstructionCache
GetProcAddress
GetNumaHighestNodeNumber
GetAtomNameA
LoadLibraryA
InterlockedExchangeAdd
SetCalendarInfoW
VirtualLock
HeapLock
GetCommMask
GetCurrentConsoleFont
SetCommMask
FoldStringA
lstrcatW
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
SetFileShortNameA
DebugBreak
GetModuleHandleA
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapSize
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
CreateFileA
CloseHandle
RaiseException
user32
InflateRect
GetActiveWindow
LoadIconA
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ