Static task
static1
Behavioral task
behavioral1
Sample
d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433N.exe
Resource
win10v2004-20240802-en
General
-
Target
d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433N
-
Size
208KB
-
MD5
c9301a39e594b0e9cff9def2f674c940
-
SHA1
d310844b14e6b99fa1cdc6f452fc43d0c6199d2d
-
SHA256
d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433
-
SHA512
f4eceadab59bd1c87772f7b12f546d6460cfd6de7b6b5a29ab8fb437e5a977fa1b6d7a15bf6409eff9132bc37eaa2ba65b8ff9d0e25f5d18b31070d78eab8ce8
-
SSDEEP
6144:RZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:DquCuygMQjd5vJIBP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433N
Files
-
d384b09de4e4041fb578b7c8d5fa72aa1b5f2f5612e505b8d944af7d48087433N.exe windows:4 windows x86 arch:x86
520c130e82cbe6120da2d52c754c2522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA
user32
GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor
gdi32
CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx
advapi32
RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey
shlwapi
StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW
opengl32
glReadBuffer
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PwM Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OwvyT Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MTxF Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XWRUxX Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YCYo Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tKhtUt Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ