Static task
static1
Behavioral task
behavioral1
Sample
28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2N.exe
Resource
win10v2004-20240802-en
General
-
Target
28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2N
-
Size
136KB
-
MD5
08d1e4a5e0102cf5b11eea85ec0563d0
-
SHA1
0fcd5ccbc5f6e2dc59866fc6488645fdc3e16fb5
-
SHA256
28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2
-
SHA512
1678eaf70f86dba0792ed7dbe70937ae4200a5cb18dd0e8f9ac495c9a854070c08187cd2e4298b0d188d501dae8365d7a512e549242db22d43c47cb10b2f3b98
-
SSDEEP
96:p+vueeN3jD3jKxI1EJMnV1erlEqURucsAG8aEdy:mMN3/32xI1EJK1erWdRuiaEk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2N
Files
-
28d29559f59d3ec1b07df775eb89ef93b363ba8611ab9279cf8fb7aeb15330f2N.exe windows:5 windows x86 arch:x86
daf39577b4b8ff03ae05fefa1e23cb88
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetProcAddress
LoadLibraryExW
ExitProcess
CreateEventA
WaitForSingleObject
WinExec
VirtualAllocEx
SleepEx
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
CloseHandle
CreateEventA
CreateProcessA
SetEvent
CreateMutexA
ReleaseMutex
FlushInstructionCache
TzSpecificLocalTimeToSystemTime
GetTempFileNameA
RegisterConsoleIME
SetConsoleNumberOfCommandsA
BaseInitAppcompatCacheSupport
GetCalendarInfoW
_lcreat
GetBinaryTypeA
SetComPlusPackageInstallStatus
UTRegister
GetConsoleAliasW
SetSystemTime
GetHandleInformation
SetFileShortNameA
SetCalendarInfoA
EnumDateFormatsW
GetFileSizeEx
BaseDumpAppcompatCache
VirtualFree
Heap32ListFirst
FatalExit
ConvertDefaultLocale
GetThreadPriorityBoost
IsValidLocale
LocalFileTimeToFileTime
CloseProfileUserMapping
GenerateConsoleCtrlEvent
GetPrivateProfileSectionNamesW
QueryDosDeviceA
DebugBreakProcess
MoveFileExW
SetConsoleNumberOfCommandsW
GlobalHandle
EscapeCommFunction
FindNextChangeNotification
GetStringTypeExW
LocalFree
GetConsoleHardwareState
FillConsoleOutputAttribute
AllocConsole
FoldStringA
SetConsoleMode
_lread
SetCurrentDirectoryA
PeekNamedPipe
GetCompressedFileSizeA
GlobalGetAtomNameA
GetConsoleCharType
GetTimeFormatW
FindActCtxSectionStringA
QueryDosDeviceW
ConvertThreadToFiber
GetWindowsDirectoryA
GetUserDefaultLCID
LZClose
DebugBreak
ExpungeConsoleCommandHistoryW
GetAtomNameW
GetConsoleAliasesLengthW
InitAtomTable
SetErrorMode
GetConsoleCommandHistoryA
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
FormatMessageW
GetCurrencyFormatA
SetProcessAffinityMask
LockFile
GetCommMask
SetConsoleInputExeNameW
BasepCheckWinSaferRestrictions
GetFileAttributesA
SizeofResource
GetTempFileNameW
InterlockedIncrement
WritePrivateProfileStructW
LZInit
GetProfileSectionA
SetCommBreak
TlsAlloc
CreateFileMappingA
QueryInformationJobObject
GetSystemTimes
OpenFileMappingA
WriteFileGather
GetProcessShutdownParameters
TerminateProcess
GetDriveTypeA
GlobalLock
QueryPerformanceFrequency
OpenSemaphoreA
WriteConsoleOutputAttribute
GetCommProperties
GetDiskFreeSpaceExA
GetNativeSystemInfo
OpenFile
GetCurrentDirectoryA
AttachConsole
SetTermsrvAppInstallMode
GetPrivateProfileStructW
SetVolumeMountPointW
GetBinaryTypeW
GetStringTypeExA
GetEnvironmentStringsA
LCMapStringW
GetCommModemStatus
EnumCalendarInfoW
GetEnvironmentVariableA
EnumTimeFormatsW
GetComputerNameExW
EnumDateFormatsExA
UnlockFile
GetFullPathNameW
CallNamedPipeW
HeapLock
SetConsoleMenuClose
SearchPathA
SetCurrentDirectoryW
CreateMailslotW
SetConsoleFont
CopyFileW
SetConsoleNlsMode
SetConsoleActiveScreenBuffer
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE