Static task
static1
Behavioral task
behavioral1
Sample
61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3.exe
Resource
win10v2004-20240802-en
General
-
Target
61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3
-
Size
851KB
-
MD5
9083957c4414992d69a87d96b8fcc0b0
-
SHA1
b0061883a08aefba57a6dcd9c1b7c24f3e15f668
-
SHA256
61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3
-
SHA512
9d6d89f758005cf840f1e9b3ff0c0f8bf17b1e92bf9d1645a13db344135bccb4dee938e7bcdb310be32969232601de800b1cf61caf9fb040213e9a354f05a1d7
-
SSDEEP
24576:vLEe8WKMbW/PMBt0tlB+gKntJAAlgfOrz:v58/hHb4dgfwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3
Files
-
61a712b5e996740656d6ee98199a88133f37295955d883ff87cd664ed06c67b3.exe windows:6 windows x86 arch:x86
aeaf21a98a8afa41c44378b18b87b796
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetFilePointerEx
GetLastError
GetProcAddress
SetCurrentDirectoryW
CompareStringW
LCMapStringW
HeapSize
FlushFileBuffers
GetConsoleCP
FreeLibrary
AcquireSRWLockExclusive
CreateIoCompletionPort
GetCommandLineW
ReleaseSRWLockExclusive
AddVectoredExceptionHandler
HeapFree
HeapReAlloc
GetQueuedCompletionStatusEx
GetStringTypeW
GetFileType
SetFileCompletionNotificationModes
GetModuleHandleA
GetStdHandle
GetConsoleMode
SetEnvironmentVariableW
MultiByteToWideChar
WriteConsoleW
TryAcquireSRWLockExclusive
SetThreadStackGuarantee
GetCurrentThread
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
GetFileInformationByHandle
GetFileInformationByHandleEx
FreeEnvironmentStringsW
CreateFileW
SetFileInformationByHandle
GetFullPathNameW
GetModuleHandleW
FormatMessageW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetACP
SetHandleInformation
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
GetProcessHeap
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
PostQueuedCompletionStatus
GetEnvironmentVariableW
CreateThread
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetConsoleCtrlHandler
GetCommandLineA
WaitForSingleObject
SetStdHandle
GetModuleHandleExW
CloseHandle
WriteFile
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
DecodePointer
ws2_32
freeaddrinfo
recv
send
WSAGetLastError
WSASend
shutdown
bind
getaddrinfo
WSAStartup
WSACleanup
WSAIoctl
setsockopt
accept
getsockopt
connect
ioctlsocket
socket
closesocket
listen
WSASocketW
iphlpapi
CreateUnicastIpAddressEntry
InitializeUnicastIpAddressEntry
GetUnicastIpAddressTable
DeleteUnicastIpAddressEntry
advapi32
RegSetKeyValueA
SetServiceStatus
SystemFunction036
RegOpenKeyA
StartServiceCtrlDispatcherA
RegCloseKey
RegisterServiceCtrlHandlerExA
RegEnumKeyA
RegGetValueA
user32
GetProcessWindowStation
GetUserObjectInformationA
bcrypt
BCryptGenRandom
ntdll
RtlNtStatusToDosError
NtCancelIoFileEx
NtDeviceIoControlFile
NtCreateFile
NtWriteFile
NtReadFile
Sections
.text Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ