Static task
static1
Behavioral task
behavioral1
Sample
exe.exe
Resource
win11-20240802-en
General
-
Target
exe.exe
-
Size
2.4MB
-
MD5
d336e3376f97f2c1adb705af4c4ecb28
-
SHA1
8d00fef34c67c89998976b0aea029b8f0aba8e8d
-
SHA256
72742e4780f2ebfe1b57f940dbe735ffa60bc2bd174dbb9851a68838c23da224
-
SHA512
b6ee4481ab59f73df79bc1e333209a7d3a4559eac5a417073f715ce760599a4f26dcc616242379751425b932cf793551e1942cb1a92317205c604ccfb9103cc1
-
SSDEEP
49152:Pv+5W2+z0hW94rztxl3dm1GG/N6smN55H:d45Gl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource exe.exe
Files
-
exe.exe.exe windows:6 windows x64 arch:x64
c9fde79adb8e02650dbd68f854dd4b6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d10
D3D10CreateDeviceAndSwapChain
kernel32
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
QueryPerformanceCounter
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
OutputDebugStringW
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
ExitProcess
ReadFile
WriteConsoleW
FreeLibrary
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
GetLocaleInfoA
SetEndOfFile
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
RtlUnwind
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapSize
user32
EmptyClipboard
GetCursorPos
ReleaseCapture
DefWindowProcW
DispatchMessageA
GetWindowRect
DestroyWindow
SetWindowPos
PostMessageA
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
GetKeyNameTextA
SetWindowLongA
MapVirtualKeyA
TranslateMessage
PeekMessageA
PostQuitMessage
GetDesktopWindow
UpdateWindow
OpenClipboard
CloseClipboard
IsWindowUnicode
GetClipboardData
SetClipboardData
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
SetCursorPos
d3dcompiler_47
D3DCompile
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 595KB - Virtual size: 595KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ