Static task
static1
Behavioral task
behavioral1
Sample
66ce0aa740197_1112.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66ce0aa740197_1112.exe
Resource
win10v2004-20240802-en
General
-
Target
66ce0aa740197_1112.exe
-
Size
1.1MB
-
MD5
861faba8e780fc1f323eb46f390fb6ca
-
SHA1
729644a29ab96c3359179d9febf7a9695a51c5f0
-
SHA256
ead514604ad7fb4bf93db0044b8fd36bfc76383a9fd938bf3fb91662da0d494d
-
SHA512
bf9039b6cd31ac83bd575584fd5e2db04e72d130be8dc29984438cd77a442d377379e3650fca93d1c4e9fcc57aaa8bc212b5d0288563badc50b9b688646c2161
-
SSDEEP
24576:p2Fl2s3xjr9pOD9KqdSzEOmUQA0Iw9W3YR0LWcTUtRydGxm:p2rxj+DhI5mdA01QY+i1tRmGxm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66ce0aa740197_1112.exe
Files
-
66ce0aa740197_1112.exe.exe windows:5 windows x86 arch:x86
607a6412857819d755bb3e6d8c421eff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CommConfigDialogA
SetEndOfFile
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
GetCurrentProcess
GetLogicalDriveStringsW
SetDefaultCommConfigW
SetEnvironmentVariableW
CreateJobObjectW
QueryDosDeviceA
InterlockedCompareExchange
UnlockFile
OpenSemaphoreA
GetTickCount
GetNumberFormatA
GetConsoleAliasExesW
CreateActCtxW
LoadLibraryW
_hread
GetCalendarInfoA
CreateEventA
SetVolumeMountPointA
GetSystemWindowsDirectoryA
SetConsoleCP
GetFileAttributesA
VerifyVersionInfoA
GetShortPathNameA
GetLastError
SetLastError
GetProcAddress
CreateNamedPipeA
SetThreadPriorityBoost
LoadLibraryA
LocalAlloc
GetNumberFormatW
SetConsoleWindowInfo
GlobalWire
VirtualProtect
EnumDateFormatsW
SetProcessShutdownParameters
SetFileShortNameA
GetDiskFreeSpaceExA
ReadConsoleInputW
GetTempPathA
LCMapStringW
HeapSize
RtlUnwind
IsProcessorFeaturePresent
GetStringTypeW
WideCharToMultiByte
Sleep
MultiByteToWideChar
HeapAlloc
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
user32
ChangeMenuW
GetKeyNameTextA
GetWindowTextLengthA
DdeQueryStringW
LoadMenuW
GetMenuState
CharUpperW
GetSysColor
SetCaretPos
SetClipboardViewer
Sections
.text Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ