Static task
static1
Behavioral task
behavioral1
Sample
delecripter beta-1.1.exe
Resource
win10v2004-20240802-en
General
-
Target
delecripter beta-1.1.exe
-
Size
42.0MB
-
MD5
01fa97346e7c88b46042d67dce7eb369
-
SHA1
c52d3e9fc009ee2dcbfe49d0db846868799f3088
-
SHA256
60a097e0b60ebc761e625b6adabab3040d097647e7581be27a870ff97db4134a
-
SHA512
3acd75173a481472d3a62523c684efef2142c64b959afecbd0e6e2260036abfaaefec3c0451cc896c522a34c88d240535b8616e40ad084717d79758c0d40cebc
-
SSDEEP
3072:+EgXGihXyvZL5rgBLrZ7Jcod/97WTg6WgNdaqWx2X5cJT72xy:+ja5gZr/dF7WTg6WgNdaqWx2X5u3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource delecripter beta-1.1.exe
Files
-
delecripter beta-1.1.exe.exe windows:5 windows x86 arch:x86
e121900965ff81d31b67b3da5bec1a40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateThread
lstrlenW
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
WaitForSingleObject
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetModuleHandleA
FreeConsole
LockResource
OpenJobObjectA
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
gdi32
CreateDCA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ