Static task
static1
Behavioral task
behavioral1
Sample
69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db.exe
Resource
win10v2004-20240802-en
General
-
Target
69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db
-
Size
222KB
-
MD5
ac3c25534c076623192b9381f926ba0d
-
SHA1
6c914b24442f0659fca9287ca662a52ac30989ad
-
SHA256
69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db
-
SHA512
617c9d9866c016ae33ace274b7f7ab90271acd6b831da890e01cc036eea217a7131bde67909c6efaeb8c3261d1a44d3c41d71837c1c963202cfa37c9f6b4efeb
-
SSDEEP
3072:o55PWbxW3oGJQ+RDh5YPgZ5PoXuiphM8QAcb0g40G273RBOeUhGh0me:OObxKJPNuo5lwZs73ph9e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db
Files
-
69530d78c86031ce32583c6800f5ffc629acacb18aac4c8bb5b0e915fc4cc4db.exe windows:6 windows x86 arch:x86
5622255f28317153f1ebbfcd23e58767
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
lstrcmpW
LocalAlloc
CreateProcessW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcessId
ReadProcessMemory
GetFileSize
VirtualAllocEx
GetProcAddress
LoadResource
CreateThread
RaiseException
CloseHandle
LoadLibraryA
GetLastError
Sleep
MultiByteToWideChar
OpenProcess
GetModuleHandleA
ExitThread
lstrcmpA
WaitForSingleObject
FindResourceA
GetTempPathW
SetEndOfFile
GetModuleFileNameW
TerminateProcess
VirtualAlloc
WriteFile
IsProcessorFeaturePresent
lstrlenW
GetCurrentProcess
VirtualFree
SizeofResource
LocalFree
ReadFile
user32
SetWindowLongA
DrawTextA
IsDialogMessageA
IsWindow
ShowWindow
GetActiveWindow
CreatePopupMenu
MessageBeep
UnionRect
PostMessageA
GetMenuItemCount
InsertMenuA
SetWindowPos
SendMessageTimeoutA
LoadCursorA
SendMessageTimeoutW
GetMenuItemID
GetWindowRect
DispatchMessageA
PostMessageW
CharUpperW
GetMessageA
GetSystemMenu
GetWindowThreadProcessId
FindWindowExA
CallWindowProcA
GetWindowTextA
SetWindowTextA
MessageBoxA
GetMonitorInfoA
GetSysColor
TabbedTextOutA
RegisterClassA
DefWindowProcA
CreateWindowExA
SetFocus
CharNextW
BringWindowToTop
TranslateMessage
SendMessageA
InsertMenuW
CreateDialogParamA
LoadIconA
MapDialogRect
SystemParametersInfoA
AppendMenuA
RemoveMenu
GetClientRect
IsZoomed
AppendMenuW
UpdateLayeredWindow
UnregisterClassA
SetRect
PostQuitMessage
GetSysColorBrush
EnableMenuItem
SystemParametersInfoW
GetWindowTextLengthA
RegisterWindowMessageW
FindWindowA
EnableWindow
MoveWindow
gdi32
CreateFontIndirectW
CreateBitmap
DeleteObject
CreateFontIndirectA
GetObjectW
Rectangle
SetBkMode
CreateHalftonePalette
SetBitmapBits
TextOutA
SetTextColor
GetTextExtentPoint32W
TextOutW
DeleteDC
GetCurrentObject
GetDeviceCaps
GetDIBits
GetBitmapBits
GetStockObject
RealizePalette
RectVisible
CreateCompatibleDC
SetDIBColorTable
GetDIBColorTable
GetTextExtentPoint32A
CreateDIBSection
CreateFontA
CreateCompatibleBitmap
BitBlt
SetPixelV
GetObjectA
PtVisible
advapi32
RegEnumValueW
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ