Static task
static1
Behavioral task
behavioral1
Sample
2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942N.exe
Resource
win10v2004-20240802-en
General
-
Target
2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942N
-
Size
667KB
-
MD5
c488335a639733620ce584a4fefbb4c0
-
SHA1
90c25383bba2d6595fff78b0b31f57b60424b0a9
-
SHA256
2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942
-
SHA512
9c98b238ab673d6536f020b7fd3d401f80eb0c38aed2c67e4bb5acdff1bb63be7c95861d8a73c7279e896b60221a2de4c3374d42aea18e2a195bc98200c1b841
-
SSDEEP
12288:QvYvO19TgDXdf30g+Y143bGgZs8YqwzWBHX/8xSS2Ck:Qv/bKdP2Y1yH8xSS3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942N
Files
-
2725de64ebbde8a530c765b66e8a1abbd5e5caa57ce6e665cb37a55f93d70942N.exe windows:5 windows x86 arch:x86
5d3cd42cfc18580ff2559372fd35fa74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetFontUnicodeRanges
GetSystemPaletteUse
SetTextCharacterExtra
SetTextAlign
SetSystemPaletteUse
GetTextCharacterExtra
GetNearestColor
user32
CallWindowProcA
GetWindowLongA
RemovePropA
GetScrollPos
BeginPaint
GetForegroundWindow
DrawTextA
GetMenuItemID
GetMenuState
IsWindowUnicode
GetKeyboardType
SetDlgItemTextA
PostMessageA
EndDialog
kernel32
GetModuleHandleExW
RaiseException
DecodePointer
EncodePointer
ReadConsoleW
ReadFile
SetEndOfFile
HeapSize
WriteConsoleW
SetFilePointerEx
GetTimeZoneInformation
SetConsoleCtrlHandler
GetProcessHeap
GetStdHandle
FlushFileBuffers
GetFileTime
QueryPerformanceCounter
GetCurrentProcess
GetCurrentProcessId
IsProcessorFeaturePresent
GetModuleHandleA
GetProcAddress
MoveFileA
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
TerminateProcess
GetLastError
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetDriveTypeW
GetFileType
SetEnvironmentVariableW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
CloseHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
HeapReAlloc
GetCurrentThread
GetStringTypeW
GetConsoleCP
GetConsoleMode
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
advapi32
SystemFunction036
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE