Static task
static1
Behavioral task
behavioral1
Sample
140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07N.exe
Resource
win7-20240708-en
General
-
Target
140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07N
-
Size
454KB
-
MD5
9e7b9e4a7ded28cd4c8a4003fe0b9b00
-
SHA1
b19b8df33f77c739e03c0aac4fd6da410e336691
-
SHA256
140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07
-
SHA512
0247a017a3493c7df99b14a4e1f5cadba0703e0da9775996cdaa6200c0ac2a9125c60500779879c12bdcd1bac0475b740b2ba117c89e9452bc8217727f746c43
-
SSDEEP
6144:1LdeTU+VIk/fYCxGnXOWwYA0g6EU6hv7jT41Pz+7gXH9Ay6BbOkT0:eTU+ik4CMXOHr0Pz+SdkNOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07N
Files
-
140ff01ce940b33fb6b4111310379255fece9c72c1b275089a46cd7682819c07N.exe windows:5 windows x86 arch:x86
b9e90b72c18cbd740db39440a20246de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CommConfigDialogA
InterlockedIncrement
EnumCalendarInfoW
InterlockedDecrement
SetEnvironmentVariableW
QueryDosDeviceA
SetVolumeMountPointW
GetComputerNameW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
TlsSetValue
GetEnvironmentStrings
SetFileShortNameW
LoadLibraryW
CopyFileW
_hread
GetCalendarInfoA
SetVolumeMountPointA
GetVersionExW
GetFileAttributesA
CreateProcessA
GetModuleFileNameW
CreateActCtxA
GetEnvironmentVariableA
GetShortPathNameA
CreateJobObjectA
GetConsoleAliasExesA
InterlockedExchange
GetStdHandle
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
GetProcAddress
EnumSystemCodePagesW
SetComputerNameA
SetFileAttributesA
GlobalFree
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
CreateEventW
OpenEventA
FoldStringW
GlobalWire
EnumDateFormatsW
GetFileTime
WaitForDebugEvent
GetShortPathNameW
GetDiskFreeSpaceExA
GetCurrentProcessId
GetTempPathA
LCMapStringW
WriteConsoleW
ReadFile
GetLocaleInfoA
EnumCalendarInfoA
SetFilePointer
WriteConsoleInputW
VerifyVersionInfoW
GetProcessHeap
SetEndOfFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
HeapSize
GetModuleHandleW
ExitProcess
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
CloseHandle
CreateFileW
user32
GetMenuInfo
gdi32
CreateDCW
GetCharWidthI
CreateDCA
GetCharWidth32A
ole32
StringFromIID
CoSuspendClassObjects
CoRegisterPSClsid
winhttp
WinHttpOpen
WinHttpCheckPlatform
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.remap Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.riwaj Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.luxi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ