Static task
static1
Behavioral task
behavioral1
Sample
Pulse External 0.2.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Pulse External 0.2.exe
Resource
win11-20241007-en
General
-
Target
Pulse External 0.2.exe
-
Size
9.4MB
-
MD5
a35901fbe80be6dc90c1d59bb323c352
-
SHA1
a5683363c95292cc35e8ebc9a3280af411fa9a4c
-
SHA256
77ca125311bc8718f6d0ba621a8ad496afa34739a769dc5f4009888d4ec06b51
-
SHA512
4ffca49f44f8b7ee0bf1e5ef721269c0ca3e51b7286d02bced2b593e0bf156c40279c719038fffc261386e59a06a8f23892ad38cf905cc7354db9924e1825fea
-
SSDEEP
196608:OeFOAMeO43JHkp2FW48MGZlz24iUpcC3eexdtF/wfH:O/A5OKWzZC7k0eXGH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pulse External 0.2.exe
Files
-
Pulse External 0.2.exe.exe windows:6 windows x64 arch:x64
90666be6479bd30c19bc5dc6ca9fcb9c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
AdjustTokenPrivileges
user32
ClientToScreen
d3d11
D3D11CreateDeviceAndSwapChain
ws2_32
InetPtonW
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmGetContext
d3dcompiler_43
D3DCompile
ntdll
NtQuerySystemInformation
dbghelp
ImageDirectoryEntryToData
Sections
.text Size: - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gehcont Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: - Virtual size: 140B
.tls Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: - Virtual size: 314B
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ok0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ok1 Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ok2 Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ