Static task
static1
Behavioral task
behavioral1
Sample
db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3.exe
Resource
win10v2004-20240802-en
General
-
Target
db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3
-
Size
291KB
-
MD5
faece5f94e98e43943db40e27e812ad8
-
SHA1
0ddba9c6029e0948dd1538c57c9b69460c383b97
-
SHA256
db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3
-
SHA512
ffcea6d222fb3d7f5da994b1340bcff8943126b2b8efcec8b87d2659e3fbd7a52e373cb535d6c4d3d2bdb286101d64b3c85b5fcc283c8746a238c28a00c05a1c
-
SSDEEP
3072:h3TE1VKVgIJegUutx0qF7dn8LoVD/B/Ag0FuYAEq/4TSgsdWV:JE1VKVfRD0qF7dxVjB/AOo1TSgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3
Files
-
db0753eff3ae48ba6d97f7da7daa61a524a8bd857e626936fa3fe4c9828dfbe3.exe windows:5 windows x86 arch:x86
e0a227016c2abf0da27a5684ba2c1d0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcmpiA
SetEvent
CloseHandle
CreateThread
CreateEventA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
DeleteCriticalSection
LoadResource
FindResourceA
LoadLibraryExA
Sleep
GetCurrentThreadId
GetCommandLineA
FlushFileBuffers
CreateFileA
ReadFile
WriteConsoleW
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
GetVersionExA
CreateMutexA
WaitForSingleObject
SizeofResource
ReleaseMutex
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
EnterCriticalSection
LeaveCriticalSection
LocalFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
VirtualFree
HeapReAlloc
HeapCreate
ExitProcess
WriteFile
GetStdHandle
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
user32
CharNextW
CharNextA
PostThreadMessageA
DispatchMessageA
GetMessageA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
ole32
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoInitialize
CoRevokeClassObject
oleaut32
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantClear
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE