Static task
static1
Behavioral task
behavioral1
Sample
9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cfN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cfN.exe
Resource
win10v2004-20240802-en
General
-
Target
9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cfN
-
Size
4.7MB
-
MD5
981d5bce29d26f95fe2fc3ab9a7cae50
-
SHA1
b81d497b87f9e7f1cd8b0b33f50a10110b77fdbc
-
SHA256
9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cf
-
SHA512
3c27b2a11fb1d8fb72e871c832054f2f5bad8b870453c848e3fb6fea6cca0d823c521cb3cd36afdfe3db16b3e8d99608b8755d51d909dec4cd3d96262ac7e16e
-
SSDEEP
24576:pviziLeFGI9mrnEWg/zZrBEu8CUVg39YJVu/ny5h4ywk5DBU:Qzs8GiW+Zj8Pg39GVunyf4yva
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cfN
Files
-
9fd9c1a52b4f85c7602270d2f906dc24997220659996e17997c703e43fbcb3cfN.exe windows:4 windows x86 arch:x86
43df92b7b77db2760430968647afb835
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetSystemTime
MultiByteToWideChar
GetLocaleInfoA
GetModuleHandleA
FindNextFileA
FindFirstFileA
FlushFileBuffers
SetStdHandle
FindClose
Sleep
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
CloseHandle
user32
MessageBoxA
advapi32
GetUserNameW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bs Size: 92KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TAvVuxiN Size: 32KB - Virtual size: 29KB
githuftY Size: 108KB - Virtual size: 106KB
QdUJDCRQ Size: 56KB - Virtual size: 53KB
fAapFvPS Size: 408KB - Virtual size: 406KB
PGwQpeoJ Size: 420KB - Virtual size: 418KB
gnmUYIBk Size: 172KB - Virtual size: 168KB
YZJpINuP Size: 52KB - Virtual size: 48KB
dIDfQkHO Size: 24KB - Virtual size: 21KB
XHSVPJLx Size: 40KB - Virtual size: 37KB
KYvjshPR Size: 120KB - Virtual size: 116KB
SJGVimxS Size: 8KB - Virtual size: 4KB
JSzkXuFh Size: 8KB - Virtual size: 6KB
EBzxuBEf Size: 32KB - Virtual size: 28KB
CKENJIOF Size: 60KB - Virtual size: 59KB
grtZwjEN Size: 20KB - Virtual size: 16KB
BSLfaCLk Size: 48KB - Virtual size: 44KB
IBIDgxOY Size: 4KB - Virtual size: 173B
kXIBAbmE Size: 260KB - Virtual size: 259KB
kOROgLTR Size: 12KB - Virtual size: 8KB
WrUhDAQh Size: 152KB - Virtual size: 150KB
yxzyIxHg Size: 56KB - Virtual size: 55KB
SzVeuIai Size: 12KB - Virtual size: 9KB
eKqKmrzs Size: 28KB - Virtual size: 27KB
cUCHwduO Size: 28KB - Virtual size: 25KB
kxEZjgcR Size: 12KB - Virtual size: 8KB
iSSMSPbr Size: 16KB - Virtual size: 12KB
DoQBTCog Size: 36KB - Virtual size: 35KB
cLFyHpVk Size: 28KB - Virtual size: 24KB
wKSgJZnz Size: 4KB - Virtual size: 1KB
dCvAkuNw Size: 16KB - Virtual size: 14KB
jNRVSpLg Size: 48KB - Virtual size: 47KB
uaeUGWci Size: 76KB - Virtual size: 72KB
uSlKWxOB Size: 36KB - Virtual size: 34KB
tBMCvyIl Size: 28KB - Virtual size: 24KB
GLdYDWZC Size: 28KB - Virtual size: 26KB
NQPcySYS Size: 60KB - Virtual size: 56KB
NqrBYxyS Size: 4KB - Virtual size: 3KB
OvaqdUJz Size: 88KB - Virtual size: 85KB
JLxTsuzb Size: 124KB - Virtual size: 122KB
uTtKQnbC Size: 12KB - Virtual size: 8KB
CDIsFEUp Size: 12KB - Virtual size: 8KB
roRiXrgh Size: 148KB - Virtual size: 147KB
eqAyiQeD Size: 16KB - Virtual size: 12KB
fwOooxXt Size: 48KB - Virtual size: 47KB
ctoSRHcV Size: 68KB - Virtual size: 65KB
cSRxKaZs Size: 64KB - Virtual size: 62KB
fqGqHPWi Size: 8KB - Virtual size: 6KB
aSgUnrHz Size: 64KB - Virtual size: 61KB
lSsfYGRS Size: 184KB - Virtual size: 182KB
KmNVoPwD Size: 8KB - Virtual size: 5KB
LCyDYwSN Size: 32KB - Virtual size: 28KB
wTEUharH Size: 36KB - Virtual size: 33KB
dxCLIVPh Size: 4KB - Virtual size: 707B
dOziDTdt Size: 8KB - Virtual size: 6KB
EyhadyMS Size: 48KB - Virtual size: 45KB
pXNnYnIR Size: 60KB - Virtual size: 57KB
kDWnzerm Size: 20KB - Virtual size: 18KB
GVihtQRO Size: 608KB - Virtual size: 606KB
rQQlHCmQ Size: 16KB - Virtual size: 14KB
pfcjKVKT Size: 4KB - Virtual size: 834B
QuIaCxln Size: 4KB - Virtual size: 1KB
kpEDUNJK Size: 4KB - Virtual size: 1KB
UlNQOybb Size: 4KB - Virtual size: 2KB
QSUOkOvg Size: 12KB - Virtual size: 9KB
pIyXdyeb Size: 176KB - Virtual size: 175KB
AVzHPUxt Size: 32KB - Virtual size: 30KB
sgBawCxA Size: 12KB - Virtual size: 9KB