Static task
static1
Behavioral task
behavioral1
Sample
d5e9aa0425660d41816c6a5dcda42dc0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5e9aa0425660d41816c6a5dcda42dc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d5e9aa0425660d41816c6a5dcda42dc0N
-
Size
540KB
-
MD5
d5e9aa0425660d41816c6a5dcda42dc0
-
SHA1
8bf5338767d1b8579458e29d8225cc9632111db1
-
SHA256
604ae70172ffd5ccc4a931e22956a7c51f86783a514e3ea9d3f118261ca0ae41
-
SHA512
71d38bccf48ff1e0d0d0769434b7de1eccc20c8cf2858509284303cc0180ca233f16371b03db24cad9532935991dcb94062e603cb127a1bdc517ac42c2d588a9
-
SSDEEP
12288:XoBw1jQPjt5fRe0xYXUiJRzoXORsOOb5o:Xgw1UPjTUX3VoXOqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5e9aa0425660d41816c6a5dcda42dc0N
Files
-
d5e9aa0425660d41816c6a5dcda42dc0N.exe windows:4 windows x86 arch:x86
d44b49ade89c3d45b11be54ccd1ef9bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
wininet
CreateUrlCacheContainerW
FtpGetCurrentDirectoryW
InternetTimeToSystemTime
InternetShowSecurityInfoByURLA
GopherGetAttributeW
SetUrlCacheConfigInfoA
user32
AppendMenuW
RegisterClassExA
RegisterClipboardFormatA
MessageBoxIndirectA
GetWindowContextHelpId
RegisterClassA
LoadMenuA
SetDebugErrorLevel
kernel32
SetUnhandledExceptionFilter
EnumSystemLocalesA
QueryPerformanceCounter
GetCurrentThread
MoveFileExA
InterlockedDecrement
FlushFileBuffers
GetTimeFormatA
EnterCriticalSection
FreeLibrary
RaiseException
GetLastError
GetConsoleMode
GlobalGetAtomNameW
GetStartupInfoW
HeapAlloc
CompareStringW
IsValidLocale
GetCurrentProcessId
HeapSize
UnlockFile
LeaveCriticalSection
GetConsoleCP
HeapDestroy
LCMapStringW
LoadResource
HeapCreate
CreateFileA
IsDebuggerPresent
GetCommandLineA
Sleep
TlsSetValue
GetEnvironmentStringsW
GetTimeZoneInformation
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTime
GetLocaleInfoW
VirtualQuery
TlsGetValue
OpenMutexA
GetFileType
WriteFile
WriteConsoleA
GetStartupInfoA
GetProcAddress
GetSystemTimeAsFileTime
SetLastError
GetCPInfo
SetConsoleCtrlHandler
TerminateProcess
GetACP
GetDateFormatA
EnumDateFormatsExA
FreeEnvironmentStringsW
GetTickCount
WriteConsoleW
FreeEnvironmentStringsA
VirtualAlloc
GetModuleFileNameA
GetPrivateProfileStringA
LCMapStringA
SetHandleCount
TlsAlloc
VirtualUnlock
GetProcessHeap
InterlockedIncrement
CloseHandle
GetStringTypeA
VirtualFree
LoadLibraryA
WideCharToMultiByte
SetStdHandle
GetCurrentProcess
InitializeCriticalSection
ExitProcess
SetConsoleTitleA
HeapReAlloc
SetEnvironmentVariableA
GetOEMCP
HeapFree
GetStringTypeW
lstrcmpW
GetCurrentThreadId
GetUserDefaultLangID
CreateMutexA
GetCommandLineW
GetModuleFileNameW
ExpandEnvironmentStringsW
RtlUnwind
GetModuleHandleA
DeleteCriticalSection
SetFilePointer
GetStdHandle
GetConsoleOutputCP
CompareStringA
MultiByteToWideChar
TlsFree
InterlockedExchange
GetEnvironmentStrings
WaitForSingleObjectEx
WriteConsoleOutputA
GetVersionExA
ReadFile
OpenWaitableTimerA
SetConsoleScreenBufferSize
IsValidCodePage
UnhandledExceptionFilter
WriteConsoleOutputAttribute
Sections
.text Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ