Static task
static1
Behavioral task
behavioral1
Sample
d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955.exe
Resource
win10v2004-20240802-en
General
-
Target
d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955.exe
-
Size
238KB
-
MD5
3ef5af57dd959f15d6d5eef088ed90e8
-
SHA1
ab5efa1579ffad99f59483d61ae44000573eceaf
-
SHA256
d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955
-
SHA512
34a988d9d4f7ff05bd64a074aab80e1bf0c007fe99d64a35c37e331133c2595c79a39431671ddf604e0a13e90cf86e15dbf0a5f5eb558df974d909456417fe11
-
SSDEEP
3072:JbLgjcKZKyCAPkvH48qw48pshB57g7sfUwo3Yf6C:JbLggK4yDPCH48qw7pxwUf3Yf6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955.exe
Files
-
d983c149edd9a0327e4849ccad36a03cf1e65a90455a17d1cd33e299e3c0c955.exe.exe windows:5 windows x86 arch:x86
091abaedeaf72e43a5ab0ff477eaf440
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaProcessorNode
GetConsoleAliasExesLengthA
InterlockedDecrement
InterlockedCompareExchange
GetComputerNameW
GetModuleHandleW
ReadConsoleW
FormatMessageA
ReadConsoleOutputA
SetCommState
GetEnvironmentStrings
GetVolumeInformationA
FatalAppExitW
CopyFileW
GetSystemTimeAdjustment
DeleteVolumeMountPointW
HeapDestroy
GetFileAttributesA
SetConsoleMode
GetFileAttributesW
GetBinaryTypeA
GetStdHandle
GetConsoleAliasesLengthW
GetLongPathNameW
GetProcAddress
LoadLibraryA
LocalAlloc
MoveFileA
QueryDosDeviceW
CreatePipe
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
GetCommTimeouts
FreeEnvironmentStringsW
BuildCommDCBA
WriteConsoleOutputAttribute
ReleaseMutex
FindAtomW
CreateFileA
SetStdHandle
GetLastError
SetPriorityClass
HeapAlloc
HeapReAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CloseHandle
user32
GetFocus
advapi32
ObjectPrivilegeAuditAlarmA
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.saturek Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yudu Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ