Static task
static1
Behavioral task
behavioral1
Sample
71e3c053d1bfb641e6925cec49005820N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71e3c053d1bfb641e6925cec49005820N.exe
Resource
win10v2004-20240802-en
General
-
Target
71e3c053d1bfb641e6925cec49005820N.exe
-
Size
573KB
-
MD5
71e3c053d1bfb641e6925cec49005820
-
SHA1
0c1c4890034dfddd2330359aa4b8760016c8d3a3
-
SHA256
9cccd19005588792fcfb9a0a4f09bcdf83b406bbafb53faf57f5874331c8af2f
-
SHA512
9f1a9c3f8e56937e57535c1364c7224fa31c08a55cbce9b346796b07b19b5fc087f3431151e391391fbd36e0fffa5759307de409ec8701c01b783990f9bf4024
-
SSDEEP
12288:vO8IF00Cop30HcR/dX+SMjzXvtv3G6etPh:vO8IFzCk33/dX+SMnvJGht5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71e3c053d1bfb641e6925cec49005820N.exe
Files
-
71e3c053d1bfb641e6925cec49005820N.exe.exe windows:5 windows x86 arch:x86
9b0f85c45a9c0cc31cc9748be6348ac3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMapMode
GetSystemPaletteUse
GetRandomRgn
UpdateColors
GetPixelFormat
SetTextJustification
GetNearestColor
GetStretchBltMode
GetFontLanguageInfo
GetTextAlign
GetTextCharacterExtra
GetDeviceCaps
GetFontUnicodeRanges
SetSystemPaletteUse
SetTextCharacterExtra
SetPixel
GetTextColor
GetTextCharset
GetObjectType
GetDCBrushColor
GetNearestPaletteIndex
user32
RemovePropA
IsWindowEnabled
MoveWindow
SetDlgItemTextA
IsWindowUnicode
GetForegroundWindow
SendMessageA
GetDlgItem
DrawTextA
GetInputState
GetKeyboardType
SetFocus
GetWindowContextHelpId
GetMenuContextHelpId
PostMessageA
GetScrollPos
WindowFromDC
GetDlgItemInt
GetWindowLongA
ShowWindow
LoadIconA
GetMenuCheckMarkDimensions
GetQueueStatus
GetCursor
GetMenuState
GetMenu
CheckDlgButton
GetMenuItemID
GetMenuItemCount
kernel32
SetEndOfFile
SetEnvironmentVariableA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
HeapSize
CreateFileW
ReadConsoleW
ReadFile
WriteConsoleW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SetFilePointerEx
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GlobalHandle
GetCurrentProcessId
GetVersion
GetModuleHandleA
GetTickCount
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
FlushFileBuffers
SetFilePointer
LockResource
IsProcessorFeaturePresent
SizeofResource
GlobalAlloc
IsDebuggerPresent
GetFileType
MoveFileA
GetLastError
GetDriveTypeA
GetProcAddress
DeleteFileA
GetProcessHeap
GlobalFlags
GetFileTime
LoadResource
GlobalSize
FindClose
GetStdHandle
CloseHandle
WriteFile
HeapFree
HeapAlloc
DuplicateHandle
CreateProcessA
GetSystemTimeAsFileTime
SetErrorMode
GetLocalTime
HeapReAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
GetStringTypeW
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
GetStartupInfoW
FatalAppExitA
WaitForSingleObject
GetExitCodeProcess
CreatePipe
RaiseException
RtlUnwind
DeleteFileW
GetFileAttributesExW
GetTimeZoneInformation
GetFullPathNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateSemaphoreW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetEnvironmentVariableW
Sections
.text Size: 501KB - Virtual size: 501KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE