Static task
static1
Behavioral task
behavioral1
Sample
750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755.exe
Resource
win10v2004-20241007-en
General
-
Target
750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755
-
Size
66KB
-
MD5
3a8d2a4e0b56bb0d47226590b52e22c3
-
SHA1
f83fafced01f201d5cd74ae705f0055e80241f14
-
SHA256
750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755
-
SHA512
b517c2568acc5c98376ec6521521655534183bd83efa0377171fc5bde7561e497a1e937d9d0e760bc4f9d5abaddb8626d991c8217b70db4e0a99b6bbf538c7ea
-
SSDEEP
1536:/27WlSmdp39KuPM9+c5dbY6By3Sv2AEo:Zt/6HY6o3SzEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755
Files
-
750cf7f0d371365a6955c92958b8e75df5423e33be057974d1c8839950480755.exe windows:4 windows x86 arch:x86
28b45f8f834f167a24ab64bd4ecf3a1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpandEnvironmentStringsA
GetTickCount
ExitProcess
GetModuleFileNameA
GetVersionExA
GetVersion
CreateFileA
GetFileSize
WriteFile
GetCurrentProcess
CloseHandle
GetLocalTime
GlobalAlloc
GlobalFree
GetModuleHandleA
GetLastError
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
ReadFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
GetStartupInfoA
WideCharToMultiByte
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
advapi32
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
CreateServiceA
OpenServiceA
CloseServiceHandle
RegSetValueExA
StartServiceA
RegCreateKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
ntdll
NtReadVirtualMemory
NtQueryVirtualMemory
RtlUnwind
_stricmp
NtEnumerateValueKey
NtQuerySystemInformation
NtCreateSection
NtMapViewOfSection
NtUnmapViewOfSection
NtCreateFile
NtOpenKey
NtQueryObject
RtlCompareUnicodeString
NtOpenThread
NtSuspendThread
NtClose
NtOpenProcess
NtResumeThread
NtQueryInformationThread
RtlRunDecodeUnicodeString
RtlInitUnicodeString
NtFlushInstructionCache
NtProtectVirtualMemory
NtAllocateVirtualMemory
NtWriteVirtualMemory
NtFreeVirtualMemory
NtQueryInformationProcess
LdrGetProcedureAddress
RtlAnsiStringToUnicodeString
LdrGetDllHandle
RtlFreeUnicodeString
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
LdrFindResource_U
LdrAccessResource
RtlInitAnsiString
Sections
.data Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ