Static task
static1
Behavioral task
behavioral1
Sample
7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98N.exe
Resource
win10v2004-20241007-en
General
-
Target
7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98N
-
Size
336KB
-
MD5
13864edd84efca7d34af2eb51b7274b0
-
SHA1
5bd550a72da8a2ee58458d340ba989e5bbb51911
-
SHA256
7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98
-
SHA512
f4f715a0f8ca85f56ae769cbe18c1ffe36fcbbb4cb95a9557d258a5d8af88295ba1421ecc50fdcda4f2111dfe894c3a60341c2c1c50d466baa5c0794f671bd5e
-
SSDEEP
6144:pQ9+RJh9dEsZDMM6Yh/sVDGWiUt7IUq2+nogw7kwWH:W9cn9dEiB/bVF5jPw7kwW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98N
Files
-
7ff39e110e63e83e113720b34ade5ac7015c19daec7475aa08700372b9a34b98N.exe windows:5 windows x86 arch:x86
e61471d142597f6f5b16224f45b93f39
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
GetNumaProcessorNode
WriteConsoleOutputCharacterA
InterlockedIncrement
OpenJobObjectA
GetCommState
InterlockedCompareExchange
GetComputerNameW
GetTimeFormatA
SetEvent
ConnectNamedPipe
GetModuleHandleW
ReadConsoleW
FormatMessageA
SetCommState
GetConsoleMode
CopyFileW
ReadConsoleOutputW
GetConsoleAliasExesLengthW
GetSystemTimeAdjustment
GetVersionExW
DeleteVolumeMountPointW
HeapDestroy
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameW
GetBinaryTypeW
ReleaseSemaphore
GetStringTypeExA
GetLastError
GetProcAddress
GetLongPathNameA
SetStdHandle
SearchPathA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
QueryDosDeviceW
FindAtomA
GetDefaultCommConfigA
FreeEnvironmentStringsW
BuildCommDCBA
FatalAppExitA
GetShortPathNameW
GlobalReAlloc
GetVolumeInformationW
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
Sections
.text Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sewi Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weg Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ