Static task
static1
General
-
Target
UNBANNED-LOADER-V1.exe
-
Size
13.1MB
-
MD5
0b5eaffda87879e58f0ef523cd8c5855
-
SHA1
06b6223bd2a747729c28b26e086eaa2332674ab3
-
SHA256
5a95eae9973afeaf67c34ece20b8deb2e7d5fa62498f6d8a67862d7767f2b358
-
SHA512
e8e7892388a39d1f373e1af25978e7f60d4552da195b17614c197152fd3c6f8ac1ca7400efdd991d05a3799da67e0a6931f222953f0b0ec26aafd8abceb632c9
-
SSDEEP
196608:iZyDUgen5xH1vaggY9bzk9g3wmHOYMEhMPmAcd0muqdvYjJT3Svq6elkRxQRO2Z:yyGaY9bzp3LOPEhMuf0mPYFuiNk7mx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UNBANNED-LOADER-V1.exe
Files
-
UNBANNED-LOADER-V1.exe.exe windows:6 windows x64 arch:x64
Password: 123
32be8bd681c26611892b89f06a552b72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
freetype
FT_Select_Charmap
kernel32
CreateDirectoryW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetCapture
gdi32
CreateRoundRectRgn
advapi32
IsValidSid
shell32
ShellExecuteW
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmReleaseContext
msvcp140
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
ntdll
RtlCaptureContext
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
wininet
InternetOpenA
normaliz
IdnToAscii
wldap32
ord143
crypt32
CertFreeCertificateContext
ws2_32
connect
shlwapi
PathFindFileNameW
rpcrt4
UuidToStringA
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
api-ms-win-crt-stdio-l1-1-0
_wfopen
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
strncpy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
__p___argc
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-filesystem-l1-1-0
remove
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: - Virtual size: 959KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eax0 Size: - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eax1 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eax2 Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ