Static task
static1
Behavioral task
behavioral1
Sample
250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663.exe
Resource
win10v2004-20240802-en
General
-
Target
250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663
-
Size
772KB
-
MD5
b248e7fa6b3e773401bea5a580bad0be
-
SHA1
8873d7579cad1d65b5fbba9d9c713bfee8528627
-
SHA256
250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663
-
SHA512
b9835c9e4cf90fde1c4ebadd09aa022b6288cc5d3d19d27165d975832697796cfb3ea94f8599a723ae8bf4c5d799f3c92f425a759325b3e018ed76ec2140523d
-
SSDEEP
24576:d6Tbs2nlyDS8hmc9rlxaOnTV4rhg/X61gS+Znm:dibN87rL34rhH1gA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663
Files
-
250d24182cf814a86ac4abc9fb20bf9460d200c51d19359573bff5f6b28e3663.exe windows:6 windows x86 arch:x86
9e2122d0a67aaeb1df648f06ab427f11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
TlsSetValue
TlsGetValue
TlsFree
SetLastError
TlsAlloc
CloseHandle
WaitForSingleObject
GetEnvironmentVariableA
GetLastError
SetFilePointer
WriteFile
GetFileType
GetFileAttributesA
GetFileSize
GetFileAttributesExA
LeaveCriticalSection
EnterCriticalSection
GetFullPathNameA
SetEndOfFile
ReadFile
VirtualAlloc
GetSystemInfo
VirtualFree
GetCurrentThreadId
GetStdHandle
FormatMessageA
LoadLibraryA
GetThreadLocale
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
FreeLibrary
CreateFileA
DeleteCriticalSection
ExitThread
InitializeCriticalSection
CreateEventA
SetEvent
TerminateThread
GetFileInformationByHandle
GetTempPathA
GetTempFileNameA
GetSystemDefaultLangID
WideCharToMultiByte
GetFullPathNameW
MultiByteToWideChar
GetUserDefaultLangID
DeleteFileA
SetThreadPriority
CreateProcessA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
GetHandleInformation
IsBadReadPtr
SetErrorMode
GetCommandLineA
GetACP
SetConsoleCtrlHandler
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
GetModuleFileNameA
VirtualQuery
GetCurrentThread
CreateFileW
GetFileSizeEx
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableW
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
RaiseException
GetModuleHandleExW
GetModuleFileNameW
WriteConsoleW
ExitProcess
SetStdHandle
GetConsoleCP
GetConsoleMode
QueryPerformanceFrequency
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
OutputDebugStringW
HeapReAlloc
HeapSize
GetFileAttributesExW
SetFilePointerEx
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
DecodePointer
imagehlp
StackWalk64
SymCleanup
SymInitialize
Sections
.text Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ