Static task
static1
Behavioral task
behavioral1
Sample
42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc.exe
Resource
win10v2004-20240802-en
General
-
Target
42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc.exe
-
Size
10.7MB
-
MD5
d9f00e572ced4da2e794954f7a96359c
-
SHA1
e7b7b39867156725ac66dd6ebb2f202993547c2e
-
SHA256
42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc
-
SHA512
7f0847a043b5511b4bfd87a1f952873ba37dfb92fb66d94986c20f4d8eefa22fc420249bb18df52056f3f8ec5085646fc2b8b5c09e846d992f0be6e9010f748a
-
SSDEEP
6144:py5MB2kzrizmvlwJccTT9WhDmeiLPpOw3yTVn3LRvO+S6f7bUtuh:1whW65WhXiLPpJg3hO+S6f7b/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc.exe
Files
-
42f82b76f2770d3274ec60448adf55e6f48c76189d664cc6cd64e958f6da53dc.exe.exe windows:4 windows x64 arch:x64
ae8ddb330239474f6595368b491db2c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
setupapi
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
CM_Get_Parent
CM_Get_Device_IDW
CM_Get_Child
CM_Get_Sibling
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
shlwapi
SHDeleteKeyW
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetLocaleInfoA
DeviceIoControl
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
EnterCriticalSection
CreateFileW
GetTickCount
GetModuleFileNameW
Sleep
SetEvent
WaitForSingleObject
CloseHandle
GetLastError
CreateEventW
CreateThread
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetCurrentProcess
GetVersionExA
GetStartupInfoW
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
user32
CreateWindowExW
ShowWindow
UpdateWindow
PostQuitMessage
DefWindowProcW
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClassExW
PostMessageW
advapi32
FreeSid
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
QueryServiceStatusEx
ControlService
StartServiceW
DeleteService
CreateServiceW
SetServiceStatus
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
ChangeServiceConfig2W
CloseServiceHandle
OpenServiceW
OpenSCManagerW
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ