Static task
static1
Behavioral task
behavioral1
Sample
f421940974aacc738a0d52530673b6c0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f421940974aacc738a0d52530673b6c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f421940974aacc738a0d52530673b6c0N.exe
-
Size
860KB
-
MD5
f421940974aacc738a0d52530673b6c0
-
SHA1
5bcd3dd8aca8a4214906ec30c1d1f4926b105d49
-
SHA256
d818adc8f4747a2ba29bb8f73b0924653506a03b715acabfb37494d97487b441
-
SHA512
31617682b9c460d7378f904312412656811f251e3e16d0b736de5e60e2592e48a590a23d97b70d44894512099fbbdf49e18167a16116477b3733e0cf54588b97
-
SSDEEP
12288:QfzEYl6R44SNebqJTokjt7oYBddNhp4ziGfSeypBilD/MohTkkHxDVLjppC55xnU:QfzEo6R4vpTo+T3d5ralZ3Lj3dJKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f421940974aacc738a0d52530673b6c0N.exe
Files
-
f421940974aacc738a0d52530673b6c0N.exe.exe windows:4 windows x86 arch:x86
fdd1752b9527a1745b5341694124a2f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
MoveFileExA
GetStringTypeExA
_lcreat
GetNumberFormatW
QueryPerformanceCounter
UpdateResourceA
SetEndOfFile
MoveFileW
GetModuleHandleW
SetSystemTimeAdjustment
EnumResourceLanguagesW
_lwrite
GetCurrentProcess
GetPrivateProfileStructA
UnmapViewOfFile
OpenSemaphoreA
EnumSystemLanguageGroupsA
IsBadHugeWritePtr
GetProfileStringA
UpdateResourceW
FlushInstructionCache
GlobalMemoryStatus
SizeofResource
GetStartupInfoW
GlobalUnWire
WaitForMultipleObjects
BackupSeek
SuspendThread
OutputDebugStringW
WritePrivateProfileSectionW
DefineDosDeviceW
GetProcessTimes
SetStdHandle
GetFileInformationByHandle
MapViewOfFileEx
Process32FirstW
DeleteVolumeMountPointW
GetCurrentProcessId
LockFile
SetThreadPriority
SetUnhandledExceptionFilter
MapViewOfFile
ExitProcess
GetLocalTime
FatalExit
GetCurrentDirectoryW
SetTapeParameters
GetFileAttributesA
MultiByteToWideChar
_lclose
SetFileAttributesA
user32
SetPropW
SendMessageW
SetScrollPos
GetThreadDesktop
DdeSetQualityOfService
GetKeyboardState
GetWindowInfo
InvalidateRgn
ShowCursor
EnumDisplayMonitors
SetCaretBlinkTime
GetCapture
GetSysColorBrush
GetDlgItemTextW
DdeCreateDataHandle
SetClassLongW
GetKeyboardLayout
IsIconic
CloseClipboard
SetWindowLongA
CopyRect
OpenDesktopW
GetCursorInfo
GetMenuState
SetWindowRgn
OpenIcon
DdeFreeStringHandle
TranslateAcceleratorW
AttachThreadInput
GetKeyboardType
GetPropW
GetMenuContextHelpId
DrawIconEx
DrawAnimatedRects
MessageBoxIndirectW
BeginDeferWindowPos
GetWindowModuleFileNameA
MapVirtualKeyExA
BringWindowToTop
SetWindowLongW
CheckMenuRadioItem
LockWindowUpdate
CreateAcceleratorTableA
SendDlgItemMessageA
ArrangeIconicWindows
CopyImage
PackDDElParam
DefWindowProcW
DdeNameService
GetUserObjectSecurity
DdeGetData
ReuseDDElParam
DdeConnectList
MonitorFromWindow
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 293KB - Virtual size: 569KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ