Static task
static1
Behavioral task
behavioral1
Sample
35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7cN.exe
Resource
win7-20240903-en
General
-
Target
35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7cN.exe
-
Size
396KB
-
MD5
8e7ee823e3bbc7d631fc56141f3371e0
-
SHA1
672c08f83861ebb0d0face90edf7717ecdf7efff
-
SHA256
35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7c
-
SHA512
d974bb253c0b12d4b75b224face9d90386e7ffcad15510932b8154eede8b350a8ae3d311f40bdc91b021eb0d73627d402fc7f8ee42b34aa0b054191101d516aa
-
SSDEEP
6144:RDNFoeWMNqhst3HziZ7Ia4py2BpcuEH8Zt5sSwwDiB:R7MMAyhHziZn4c2BORquwDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7cN.exe
Files
-
35730163128abf62883271557c644aca5ae1001a83f41bcbd0426fd224b81c7cN.exe.exe windows:5 windows x86 arch:x86
827297e739d4dc45bd5e6431a2540fd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommState
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
InterlockedCompareExchange
SetVolumeMountPointW
GetModuleHandleW
CreateNamedPipeW
FindNextVolumeMountPointA
GetNumberFormatA
CreateActCtxW
TlsSetValue
LoadLibraryW
GetLocaleInfoW
GetCalendarInfoA
GetFileAttributesW
GetModuleFileNameW
GetShortPathNameA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GlobalUnfix
GetLogicalDriveStringsA
GetLastError
SetLastError
GetProcAddress
PeekConsoleInputW
EnumSystemCodePagesW
GetConsoleDisplayMode
SetComputerNameA
LoadModule
SetThreadPriorityBoost
GetConsoleAliasExesLengthA
GetFileType
CreateFileMappingW
CreateHardLinkW
CreateEventW
FoldStringW
GetProcessShutdownParameters
LoadLibraryExA
VirtualProtect
GetCurrentDirectoryA
EnumDateFormatsW
GetFileTime
OpenEventW
SetCalendarInfoA
SetFileShortNameA
GetVersionExA
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DebugBreak
GetTempPathA
EnumCalendarInfoExA
LocalFree
LCMapStringW
CommConfigDialogW
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
IsValidCodePage
SetEndOfFile
GetConsoleAliasExesA
EnumCalendarInfoA
GlobalMemoryStatus
LocalAlloc
SetDefaultCommConfigA
GetOEMCP
GetACP
HeapFree
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapCreate
ExitProcess
WriteFile
GetStdHandle
Sleep
HeapSize
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCPInfo
user32
CharUpperA
SetCaretPos
LoadMenuA
GetMenuStringW
GetWindowLongW
InsertMenuItemW
GetMenu
DrawStateW
gdi32
GetCharWidthFloatA
CreateDCA
GetCharWidth32A
GetTextMetricsA
GetBkMode
ole32
CoUnmarshalHresult
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.royoni Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.birotuy Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hemel Size: 1024B - Virtual size: 923B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fufi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ