Static task
static1
Behavioral task
behavioral1
Sample
c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85.exe
Resource
win10v2004-20240802-en
General
-
Target
c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85
-
Size
387KB
-
MD5
b2bae2c34cbca26a976944c0fcff3942
-
SHA1
851a754eeca2f7010f8a773726b1791c43cda8c7
-
SHA256
c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85
-
SHA512
3dee5025823707939b3606497d790bcf8bce6bae07d86ea59b7273eb70e0dac854b5627ad83c024ae3e372718999f57c55b1fa481d88ce9e82b67b0ebf305b63
-
SSDEEP
6144:jh7KtMfvluonT0AgLUt7I0V5D1rq1myiHnrxEpjslxcET4/YmUbeJeL0L9b+DbzE:hv3D+IjfD1EiHt4NUbWCH/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85
Files
-
c74633114cefb5b607b8e4a55950061a85fe4b53566d3f153cedeac569724c85.exe windows:5 windows x64 arch:x64
7fee2751974feb414da222df8685bff4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
DeleteFileA
Sleep
GetProcAddress
MultiByteToWideChar
GetModuleHandleW
GetProcessHeap
SetEndOfFile
CreateFileW
CreateFileA
WriteConsoleW
SetStdHandle
LoadLibraryW
WideCharToMultiByte
EncodePointer
DecodePointer
GetStringTypeW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoW
GetLastError
HeapFree
HeapAlloc
GetCPInfo
GetCommandLineW
GetStartupInfoW
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
LCMapStringW
GetDateFormatA
GetTimeFormatA
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapSetInformation
GetVersion
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableA
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
urlmon
URLDownloadToCacheFileA
Sections
.text Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ