Static task
static1
Behavioral task
behavioral1
Sample
03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70.exe
Resource
win10v2004-20240802-en
General
-
Target
03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70
-
Size
428KB
-
MD5
9c5ad6555f192a1ce60f8fed22b26626
-
SHA1
c34cec6a60272d9c737eb64bee7764d2d835d645
-
SHA256
03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70
-
SHA512
42e7e2856fd1a441cf08bc15da22c2c988a71fc274fa990745b689c15239516c8ede8cce6155e2bb014236acf25e5beafcead8d1d321ec3c096ff6626700a3bf
-
SSDEEP
6144:UIzwIcWMtyRHZQTwOqDHQzjsZqb/NQNZA23MMsAONlhrwLgz:UBEey5iwJHQsZqb/qDsptwLgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70
Files
-
03baad3d494c4a52ddc46a88511aa49ac0f83c4a7d9f7c3560effe694a507c70.exe windows:6 windows x86 arch:x86
5836638c1a2856a2920800de513b3807
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libcef
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_map_alloc
cef_string_map_free
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_append
cef_string_list_clear
cef_string_list_value
cef_string_list_size
cef_string_map_size
cef_api_hash
cef_execute_process
cef_post_task
cef_v8value_create_function
cef_v8value_create_string
cef_v8value_create_int
cef_v8value_create_bool
cef_string_list_free
cef_string_list_alloc
cef_v8context_get_current_context
cef_process_message_create
cef_string_userfree_utf16_free
cef_string_wide_to_utf8
cef_log
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_cmp
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_utf16_set
kernel32
WriteConsoleW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
GetModuleFileNameW
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
SetLastError
GetLastError
CreateFileW
HeapSize
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ