Static task
static1
Behavioral task
behavioral1
Sample
818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73N.exe
Resource
win7-20240903-en
General
-
Target
818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73N
-
Size
375KB
-
MD5
18e6601dfa681939678501528d022eb0
-
SHA1
afb53ae7cfe4010a2d19dc5c4a29979a7115d605
-
SHA256
818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73
-
SHA512
3677c879e05ee2f297d977b37e790859d12ce47136396fb590baff745bae66a0a5f0a6998b854ada2249e81f6b352803ce05506c2a7268db9db6fc61633688dd
-
SSDEEP
6144:u2X9w3nkJpk9L9bhXLxFEay2RfJUL/FWlZV8A6nOCx6D4:u2N2ZbhXpyW0glX6nOb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73N
Files
-
818903c23636af86c4d2d317108b0aff21fd264641442f7efd2c78c872ff8f73N.exe windows:5 windows x86 arch:x86
fed4f5df4b87d4492844157ffe8e75e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetCurrentProcess
CreateJobObjectW
CreateHardLinkA
GetModuleHandleW
GetNumberFormatA
SetFileTime
SetCommState
LoadLibraryW
ReadConsoleInputA
GetCalendarInfoA
SetVolumeMountPointA
GetConsoleAliasExesLengthW
GetFileAttributesA
EnumSystemCodePagesA
GetTimeFormatW
GetFileAttributesW
CreateActCtxA
GetEnvironmentVariableA
SetThreadPriority
GetTempPathW
GetShortPathNameA
VerifyVersionInfoW
InterlockedExchange
GlobalUnfix
GetStdHandle
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
GetLongPathNameW
GetProcAddress
CreateNamedPipeA
SetComputerNameA
EnumCalendarInfoW
GlobalFree
LoadLibraryA
InterlockedExchangeAdd
CreateFileMappingA
LocalAlloc
SetCalendarInfoW
CreateEventW
FoldStringA
SetEnvironmentVariableA
GetModuleFileNameA
GlobalUnWire
GetProcessShutdownParameters
LoadLibraryExA
EnumDateFormatsW
OpenEventW
SetProcessShutdownParameters
SetFileShortNameA
GetVersionExA
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DebugBreak
EnumCalendarInfoExA
LCMapStringW
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetConsoleMode
CloseHandle
GetConsoleCP
InterlockedIncrement
CommConfigDialogA
GetConsoleAliasExesA
GetLocaleInfoA
SetFilePointer
TlsGetValue
LoadModule
GetComputerNameA
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapCreate
HeapSize
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
user32
GetWindowLongA
SetCaretPos
GetMenuStringW
InsertMenuItemW
LoadMenuA
CharLowerBuffA
SetMenu
gdi32
GetCharWidthI
GetBkMode
CreateDCW
GetCharWidth32W
GetPixelFormat
advapi32
RegSetValueA
winhttp
WinHttpQueryHeaders
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ