Static task
static1
Behavioral task
behavioral1
Sample
11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57.exe
Resource
win10v2004-20240802-en
General
-
Target
11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57
-
Size
397KB
-
MD5
f2ed62112a34067d971739425ae2a5ce
-
SHA1
cb105188bac8cd7dc49914678e35f843a2bb8862
-
SHA256
11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57
-
SHA512
2fffaf08cef53d5f9c53dc22b8c2a1edec5896c2abb4acc9a6410a449ef015323330c73a9fafeec6c13376b3cdb210f75013113203da947f0c55f81f31e91e58
-
SSDEEP
6144:U2I0tjaH3IifLQSITFrCvARkpQSlloN5cf3gFshGnXpt/:Ur0teYijQBCT2SUOesYn5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57
Files
-
11fab15d61c9c949956a7da4e1aebfd8258cf5454f42b289dcf009527ba35e57.exe windows:5 windows x86 arch:x86
df4d2a4bd92f088be1a8a418b75c597d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesLengthA
GetCurrentProcess
GetLogicalDriveStringsW
SetDefaultCommConfigW
SetEnvironmentVariableW
CreateJobObjectW
QueryDosDeviceA
InterlockedCompareExchange
UnlockFile
OpenSemaphoreA
CreateHardLinkA
GetTickCount
GetNumberFormatA
GetConsoleAliasExesW
SetCommState
GlobalAlloc
LoadLibraryW
LocalShrink
_hread
GetCalendarInfoA
CreateEventA
SetVolumeMountPointA
GetSystemWindowsDirectoryA
SetConsoleCP
GetFileAttributesA
VerifyVersionInfoA
CreateActCtxA
GetShortPathNameA
GetLastError
SetEndOfFile
SetLastError
GetProcAddress
PeekConsoleInputW
CreateNamedPipeA
GetProcessVersion
SetThreadPriorityBoost
LoadLibraryA
InterlockedExchangeAdd
CreateFileMappingW
GetNumberFormatW
SetConsoleWindowInfo
GlobalWire
GetModuleFileNameA
EnumResourceNamesA
VirtualProtect
EnumDateFormatsW
SetProcessShutdownParameters
SetFileShortNameA
GetDiskFreeSpaceExA
ReadConsoleInputW
GetTempPathA
LCMapStringW
HeapSize
RtlUnwind
GetCurrentDirectoryW
CommConfigDialogA
MultiByteToWideChar
HeapAlloc
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
Sleep
WideCharToMultiByte
GetStringTypeW
user32
CharUpperW
GetSysColor
GetMenuStringA
GetCaretPos
LoadMenuW
gdi32
CreateDCW
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ