Static task
static1
Behavioral task
behavioral1
Sample
cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155.exe
Resource
win10v2004-20241007-en
General
-
Target
cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155
-
Size
622KB
-
MD5
9d45cd7adc3588acc240a85ce5351cee
-
SHA1
f4bc414c0ddd729c6a8860c017510bdc68c6364a
-
SHA256
cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155
-
SHA512
f7c8ffa56c0a5209d0bfb259823ff8c4920a3ee1a13ae7a3af9e6d5df09bc4f8e8ae3a80da9e0ec650d133795c0b8f908dc2e2ca033090db5f91801f973353bb
-
SSDEEP
12288:2ZwXzIdt2CsuXKmfjwj5YmMpkT7Tc3PT2q0uDjDMWf:2DnRXKmNgg3PT2q0ewW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155
Files
-
cac54021f3b9a3b92811c5f3c0b5313fcb5a9b985d7fb90892134b5eb73c1155.exe windows:6 windows x64 arch:x64
ab64586e9f8ab0106f48c06595cbaba0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
CreateFileW
WriteConsoleW
FindResourceW
LoadResource
Sleep
VirtualAlloc
SizeofResource
FindClose
FindNextFileA
FindFirstFileA
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetProcessHeap
GetStringTypeW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
ws2_32
WSAStartup
recv
htons
socket
inet_pton
WSACleanup
send
closesocket
connect
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ