Static task
static1
Behavioral task
behavioral1
Sample
secretservice_client.exe
Resource
win10v2004-20241007-en
General
-
Target
secretservice_client.exe
-
Size
12.4MB
-
MD5
d388d2ed5ac3fb247b63b0da901756f7
-
SHA1
2e5e8e8d3cdb64ba825f8f136284caa9e001a8b9
-
SHA256
c98311b56a41579e32144d6c25d133e00191743ff5df965dfc4ff6ad3d0c63e4
-
SHA512
8e5a91d7176ebcee4af5b19aa15e83e387ea5b6692239ca3377afe5511459f66d02ebd3ea3f936079a369274b8c5e42857e0afd0c8e8a036429131b5010e2228
-
SSDEEP
393216:vqq3E3Qg0i221yfLD9UZ+2OnM9V3aikDcvKvuZ:yqUAZi2kyjDSJzycg6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource secretservice_client.exe
Files
-
secretservice_client.exe.exe windows:6 windows x64 arch:x64
c2865c9abd01ac46094fbe6fe66f7d2a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemory
kernel32
QueueUserAPC
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxW
gdi32
CreateRoundRectRgn
advapi32
CredFree
ole32
CoUninitialize
oleaut32
SysAllocString
ws2_32
getsockopt
wintrust
WinVerifyTrust
imm32
ImmSetCompositionWindow
Sections
.text Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 635KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exon0 Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exon1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exon2 Size: 12.4MB - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ