Static task
static1
Behavioral task
behavioral1
Sample
d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
Resource
win10v2004-20240802-en
General
-
Target
d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
-
Size
232KB
-
MD5
6b0969eed91d044d6c30af82c4fe58f0
-
SHA1
834e56fdbada1ccddd506fc12eb883155b671281
-
SHA256
d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f
-
SHA512
3d5a88cc0b4716a4b126b9c1bc25e41012eade1dccfb0204c7a4a7795a85764aa7e648b27316f35e7bcd52622c199ab6640c3b19cc37f6014ef5293f6b3dd380
-
SSDEEP
3072:M9PFYSLtMp5olcxWrNJCVSWgOuc5NJu+r7Avo5+IjMKIjGhasGcdhG:mLEelcGOyc5NJSRjGYsGI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe
Files
-
d9ada9e0625b3d794146200935969bbb5f8a6ad3a998b1408617574bcc9e524f.exe.exe windows:5 windows x86 arch:x86
ad5e7fce0417e12bb0931a47422a42c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
SearchPathW
SetPriorityClass
CopyFileExW
GetNumaProcessorNode
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
QueryDosDeviceA
GetComputerNameW
CallNamedPipeW
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetConsoleAliasesLengthA
GetUserDefaultLangID
GetEnvironmentStrings
LoadLibraryW
GetConsoleMode
Sleep
CopyFileW
WriteConsoleOutputA
HeapDestroy
GetFileAttributesA
GlobalFlags
GetModuleFileNameW
GetBinaryTypeW
GetStartupInfoW
GetCommandLineW
WritePrivateProfileStringW
DisconnectNamedPipe
CreateDirectoryA
InterlockedExchange
FillConsoleOutputCharacterW
GetLastError
GetProcAddress
SetStdHandle
EnterCriticalSection
SearchPathA
BuildCommDCBW
OpenWaitableTimerW
LocalAlloc
FindAtomA
FoldStringW
GetDefaultCommConfigA
SetConsoleTitleW
GetModuleHandleA
GetShortPathNameW
SetCalendarInfoA
GlobalReAlloc
SetFileAttributesW
GetVolumeInformationW
CreateFileA
DebugActiveProcess
HeapFree
HeapAlloc
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
FlushFileBuffers
ReadFile
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
user32
SetFocus
GetUserObjectInformationA
advapi32
RegCreateKeyA
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ