Static task
static1
Behavioral task
behavioral1
Sample
89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55.exe
Resource
win10v2004-20240802-en
General
-
Target
89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55
-
Size
160KB
-
MD5
ca9c816522612cb0b59b9475bedb4152
-
SHA1
155055ae6a2bb828639d6dc47bf6b309ccb3fe76
-
SHA256
89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55
-
SHA512
b23b9bcdeaf405964347ce9af92da8d7b43171a3d452b96bf979d937b8aa0bb3d2fea831e5ba674c196831c2e9b2602f369d9cf2d21b2e06e60aa867ef302824
-
SSDEEP
1536:/smP+qaBAxmxkRtr8TBYZO0EiVwdyRv9mRU6FOmERaopG:EmPouwGGiV2cmRhO5ao0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55
Files
-
89e712d46073a9c7246d75b706f63458678c6076833d4ce1dc4a2f07a2ebdb55.exe windows:4 windows x86 arch:x86
a4b7ef26f4b2ddcdb0a797809cd5032d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersion
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
CloseHandle
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
CreateFileA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ