Static task
static1
Behavioral task
behavioral1
Sample
exe.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
exe.exe
Resource
win11-20240802-en
General
-
Target
exe.exe
-
Size
2.4MB
-
MD5
a258088a003020845d3af638fd4e7cde
-
SHA1
e0ce8763e0e4350c9a1a4f5502a6ffd7c0201596
-
SHA256
39d464bf634544f1663f3b010c2ebbbf729671061353367af80ccef2349293ec
-
SHA512
2fc46be90bef1e1f253a426c367fedbad9ac4a1cb3bb88baea1edda37b83a5eef58e4130ab397c2c01e58f1c5d684691a227ffdc54b0a5749e8568f33f6007ea
-
SSDEEP
24576:I05By6xNuVo39wm2O/hePojQqtlC6zbpCqQ2TcVMrf0IG+E3zzUTmt/55HouLVv6:vBwm2O/gk3t8SbJQzV0f07Wmt55HE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource exe.exe
Files
-
exe.exe.exe windows:6 windows x64 arch:x64
c9fde79adb8e02650dbd68f854dd4b6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d10
D3D10CreateDeviceAndSwapChain
kernel32
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
QueryPerformanceCounter
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
OutputDebugStringW
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
ExitProcess
ReadFile
WriteConsoleW
FreeLibrary
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
GetLocaleInfoA
SetEndOfFile
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
RtlUnwind
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapSize
user32
EmptyClipboard
GetCursorPos
ReleaseCapture
DefWindowProcW
DispatchMessageA
GetWindowRect
DestroyWindow
SetWindowPos
PostMessageA
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
GetKeyNameTextA
SetWindowLongA
MapVirtualKeyA
TranslateMessage
PeekMessageA
PostQuitMessage
GetDesktopWindow
UpdateWindow
OpenClipboard
CloseClipboard
IsWindowUnicode
GetClipboardData
SetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
SetCursorPos
d3dcompiler_47
D3DCompile
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 595KB - Virtual size: 595KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ