Static task
static1
Behavioral task
behavioral1
Sample
afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4.exe
Resource
win10v2004-20240802-en
General
-
Target
afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4
-
Size
262KB
-
MD5
5db053aab77024a752fc807713f10c29
-
SHA1
84a8c7460e75e4820c128afdc71847d8ffabf1b8
-
SHA256
afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4
-
SHA512
75732dede2470ee911a2707dfa2f3d5c64a0d4eafddb6af04c9f632aca53b911db60cbbb2754994b768f60a1b19cd919cd5533f60c9563d8034470d0ef958f61
-
SSDEEP
6144:+Fak5GIw7RNKa72empMH2Qp4oyUfcMwX2EYyHck/G:bvIw7RN3sGHPp4oyUmGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4
Files
-
afe576790c10f0bbcefad70f0af92b0f76082bec4b12c33efea7c6c0d4683df4.exe windows:5 windows x86 arch:x86
4e33f34802a5eda03a660f9739532d75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommState
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
InterlockedCompareExchange
SetVolumeMountPointW
GetModuleHandleW
CreateNamedPipeW
FindNextVolumeMountPointA
GetNumberFormatA
CreateActCtxW
TlsSetValue
SetFileShortNameW
LoadLibraryW
LocalShrink
GetLocaleInfoW
GetCalendarInfoA
GetFileAttributesW
GetModuleFileNameW
GetShortPathNameA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GlobalUnfix
GetLastError
SetLastError
GetProcAddress
PeekConsoleInputW
EnumSystemCodePagesW
GetConsoleDisplayMode
SetComputerNameA
LoadModule
SetThreadPriorityBoost
GetConsoleAliasExesLengthA
GetFileType
CreateFileMappingW
CreateHardLinkW
GetNumberFormatW
CreateEventW
FoldStringW
SetEnvironmentVariableA
EnumDateFormatsA
GetProcessShutdownParameters
LoadLibraryExA
VirtualProtect
GetCurrentDirectoryA
GetFileTime
OpenEventW
SetCalendarInfoA
GetVersionExA
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DebugBreak
GetTempPathA
EnumCalendarInfoExA
LCMapStringW
CommConfigDialogW
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
IsValidCodePage
SetEndOfFile
GetConsoleAliasExesA
EnumCalendarInfoA
GlobalMemoryStatus
LocalAlloc
SetDefaultCommConfigA
GetOEMCP
GetACP
HeapFree
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapCreate
ExitProcess
WriteFile
GetStdHandle
Sleep
HeapSize
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCPInfo
user32
CharUpperA
SetCaretPos
LoadMenuA
GetMenuStringW
DrawStateW
InsertMenuItemW
GetMenu
GetWindowLongW
gdi32
GetCharWidthFloatA
CreateDCA
GetCharWidth32A
GetTextMetricsA
GetBkMode
ole32
CoUnmarshalHresult
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tesip Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kof Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fawovor Size: 1024B - Virtual size: 923B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wiveju Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ