Static task
static1
Behavioral task
behavioral1
Sample
f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18N.exe
Resource
win10v2004-20241007-en
General
-
Target
f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18N
-
Size
3.4MB
-
MD5
07e1b0c540409bccd6442d2101a1ff90
-
SHA1
a0f10e8f8e47e3cf34f1dd5722e9452afd08516f
-
SHA256
f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18
-
SHA512
dfb2bfbfedf27a1c18980eba2d38fafd03f3434cfea4072bb948250f04061f563ab300b69c029f8c303a3f4e3e7add9e1c691d1d106d0fb803e5040cbd58d1cd
-
SSDEEP
49152:vzA68GXXDRDE/SyiYpA5NVFBEU1wrE+eglmErHJVK:c2zRDoSyHAPVFBEU1wrE+egzrH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18N
Files
-
f4503b5b987db684112da4e6451af96ab05c714a9000c3fd9eae2aee22999d18N.exe windows:4 windows x86 arch:x86
c6e5ef895a617e3b03d0114f0860eb9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
InitCommonControlsEx
ImageList_Write
ImageList_SetImageCount
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Read
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
DestroyPropertySheetPage
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
kernel32
CreatePipe
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnumResourceNamesW
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToSystemTime
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatW
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcessHeap
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
CreateMutexW
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
lstrcmpA
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileExW
MulDiv
MultiByteToWideChar
OpenEventA
OpenEventW
OpenMutexW
OpenProcess
OutputDebugStringA
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileTime
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WritePrivateProfileStructW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
RtlUnwind
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateEventA
CompareStringW
CompareFileTime
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringA
GetVersionExA
user32
MessageBoxA
MessageBoxW
LoadStringW
MapWindowPoints
comdlg32
CommDlgExtendedError
advapi32
StartServiceW
CloseServiceHandle
ControlService
FreeSid
GetUserNameA
GetUserNameW
InitializeSecurityDescriptor
InitiateSystemShutdownW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
shell32
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
shlwapi
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionW
PathMatchSpecW
PathIsDirectoryW
PathFindFileNameA
PathCombineW
PathFileExistsW
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ