Static task
static1
Behavioral task
behavioral1
Sample
59cb5d0876e4708c6fbb6e0103eaa000N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59cb5d0876e4708c6fbb6e0103eaa000N.exe
Resource
win10v2004-20240802-en
General
-
Target
59cb5d0876e4708c6fbb6e0103eaa000N.exe
-
Size
4.1MB
-
MD5
59cb5d0876e4708c6fbb6e0103eaa000
-
SHA1
97083e646656b8fd8096d402f5248e626b65d7b9
-
SHA256
7bd8213d5e5cc00741801c7a4c2ec27c25ef91566b87a4add453ec26c22c658e
-
SHA512
902092b1d527eae23e08abb18e1c61097bffde02100dec782573486bb302b559618dce99826d10b1876a6df1b3285f60670782fb9a4b7c6ec64bf855b828cbc3
-
SSDEEP
98304:jcw3+l1zFroLoWh40KTPoC7zcy70eesGXd4NFq7OD:jcQk1zJIz40KzcyVUd22q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59cb5d0876e4708c6fbb6e0103eaa000N.exe
Files
-
59cb5d0876e4708c6fbb6e0103eaa000N.exe.exe windows:5 windows x86 arch:x86
008e410538a10905126867819fc066ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
kernel32
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathW
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
lstrlenW
MapViewOfFile
MoveFileExW
GetDriveTypeW
MultiByteToWideChar
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
LCMapStringA
ResetEvent
ResumeThread
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFileTime
SetLastError
SetProcessPriorityBoost
SetStdHandle
SetUnhandledExceptionFilter
SleepEx
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
RtlUnwind
GetDiskFreeSpaceExW
GetDateFormatW
GetDateFormatA
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrencyFormatW
GetCPInfo
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetACP
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FormatMessageA
FoldStringW
FlushFileBuffers
FlushConsoleInputBuffer
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesW
EnumSystemLocalesA
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessW
CreateMutexW
CreateMutexA
CreateIoCompletionPort
CreateFileW
CreateFileMappingW
CreateEventW
CreateEventA
CreateDirectoryW
CompareStringW
CloseHandle
AreFileApisANSI
CreateProcessA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
RaiseException
GetCommandLineA
GetVersion
GetThreadLocale
GetCurrentThreadId
VirtualAlloc
GetStringTypeA
MoveFileW
RemoveDirectoryW
user32
GetKeyboardType
MessageBoxA
GetAsyncKeyState
GetDesktopWindow
GetProcessWindowStation
GetSystemMetrics
wsprintfW
wsprintfA
GetUserObjectInformationW
rpcrt4
UuidToStringW
RpcStringFreeW
advapi32
SetServiceStatus
ReportEventW
ReportEventA
RegSetValueExW
RegSetValueExA
RegSaveKeyA
RegRestoreKeyA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegisterServiceCtrlHandlerW
RegisterEventSourceW
RegisterEventSourceA
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
QueryServiceStatus
QueryServiceLockStatusW
QueryServiceConfigW
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
LookupPrivilegeValueA
LookupAccountSidW
LookupAccountNameW
LogonUserW
LockServiceDatabase
IsValidSecurityDescriptor
ImpersonateLoggedOnUser
GetTokenInformation
GetSidSubAuthorityCount
GetSidLengthRequired
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetKernelObjectSecurity
GetAclInformation
EnumServicesStatusW
DestroyPrivateObjectSecurity
DeregisterEventSource
DeleteService
CreateServiceW
CopySid
ControlService
CloseServiceHandle
ChangeServiceConfigW
AllocateLocallyUniqueId
AdjustTokenPrivileges
AccessCheck
StartServiceCtrlDispatcherA
StartServiceW
UnlockServiceDatabase
RevertToSelf
ole32
CoCreateGuid
CoUninitialize
StringFromCLSID
CoCreateInstance
CoTaskMemFree
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_vga_5 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE