Static task
static1
Behavioral task
behavioral1
Sample
0d68f727804f4c4058f092a2507389bb654dc3361c8e401434eaf053f5dc50b7.exe
Resource
win7-20240704-en
General
-
Target
0d68f727804f4c4058f092a2507389bb654dc3361c8e401434eaf053f5dc50b7.exe
-
Size
314KB
-
MD5
2b64610568ef7f345358343288996782
-
SHA1
66f86139161bc93f6d84783e3ea57a6a6c948564
-
SHA256
0d68f727804f4c4058f092a2507389bb654dc3361c8e401434eaf053f5dc50b7
-
SHA512
d1991ffd6dc0406e0577cb72f63edfa8bfd4f13efcc2d8280bc9d2b4123447f5fa51b4340897e9104176b79bb097923c64421cab6adb7927f33b15a20a6cefb0
-
SSDEEP
3072:7qYILWFaKi8v2WmCKncvq08rbIUWfIn8bPYiu4TrItLzGCeaWl05YTLa6eY1Y:7SL43i8SncPmdWAn8sv4TrItLzGNfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d68f727804f4c4058f092a2507389bb654dc3361c8e401434eaf053f5dc50b7.exe
Files
-
0d68f727804f4c4058f092a2507389bb654dc3361c8e401434eaf053f5dc50b7.exe.exe windows:5 windows x86 arch:x86
8b5590948a35352020c6d0dccda766b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalCompact
InterlockedCompareExchange
FindCloseChangeNotification
FreeEnvironmentStringsA
GetModuleHandleW
FormatMessageA
ReadConsoleOutputA
GetDateFormatA
GetSystemTimes
LoadLibraryW
GetProcessHandleCount
HeapCreate
GetFileAttributesW
RaiseException
GetLastError
GetProcAddress
GlobalDeleteAtom
LoadLibraryA
UnhandledExceptionFilter
LocalAlloc
GetCurrentConsoleFont
SetCommMask
FoldStringA
GetDefaultCommConfigA
lstrcatW
VirtualProtect
EnumDateFormatsW
FindAtomW
CloseHandle
GetFileInformationByHandle
DebugBreak
SetDefaultCommConfigA
HeapUnlock
GetFullPathNameA
MultiByteToWideChar
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetModuleHandleA
user32
LoadIconW
advapi32
ReadEventLogW
IsValidSid
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ