Static task
static1
Behavioral task
behavioral1
Sample
020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc.exe
Resource
win10v2004-20241007-en
General
-
Target
020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc
-
Size
553KB
-
MD5
bae8fe20dcec7d2ddd91b4e62e73625c
-
SHA1
2bc4f88ab511976b873ef559ae051bee4fa3c051
-
SHA256
020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc
-
SHA512
b4e788b5876d429d1c8e41a6faad654a821277b390085a6d6730dab645aa161de6a9ddfe7db2bc2dcef7482fc1a9a5dae7c1b12a37834938e669ac88995e2b0f
-
SSDEEP
12288:rc1d4DNdhT6VerOwSRQWfgAk9oZzG96bZqsYTdKJ:raCDNdh2VeKnRPfgAk6ZzGCq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc
Files
-
020d2ea5de12948f46dd3f72c69cb6fe2eba071649ca73c1a108a978eb5d30dc.exe windows:5 windows x64 arch:x64
a9229ad1270f6a22293012856ce0dc4d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLocalTime
GetNativeSystemInfo
GetTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
CreateEventW
CreateWaitableTimerW
SetWaitableTimer
GetLogicalDriveStringsW
GetModuleFileNameW
CreateProcessW
GetDriveTypeW
GetSystemDirectoryW
GetTempPathW
CreateDirectoryW
GetComputerNameW
QueryPerformanceCounter
GetSystemDefaultLCID
SetEndOfFile
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetFileTime
HeapReAlloc
HeapSize
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
ReadFile
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
Sleep
WaitForSingleObject
SetEvent
GetThreadContext
SetErrorMode
CreateThread
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
OpenProcess
SetProcessWorkingSetSize
GlobalMemoryStatusEx
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
LCMapStringW
FindFirstFileW
GetModuleHandleW
LoadLibraryW
FindClose
GetCurrentThread
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
GetSystemPowerStatus
LocalFree
LocalAlloc
CreateFileW
CloseHandle
DeviceIoControl
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
SetLastError
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MulDiv
GetLastError
RaiseException
user32
EnableWindow
RegisterWindowMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
PostMessageW
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
EnumDisplayDevicesW
EnumDisplaySettingsW
IsDialogMessageW
LoadImageW
LoadIconW
LoadCursorW
EnumChildWindows
GetDesktopWindow
ScreenToClient
GetCursorPos
GetWindowRect
GetClientRect
DefWindowProcW
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SwitchToThisWindow
TrackPopupMenuEx
AppendMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
CreatePopupMenu
GetSystemMetrics
SetWindowTextW
KillTimer
SetTimer
keybd_event
GetKeyState
SetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetDlgCtrlID
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowPos
MoveWindow
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
gdi32
DeleteObject
CreateSolidBrush
GetDeviceCaps
GetTextMetricsW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetStockObject
CreateFontIndirectW
comdlg32
ChooseColorW
GetSaveFileNameW
ChooseFontW
advapi32
RegOpenKeyExW
RegCloseKey
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
CloseServiceHandle
InitiateSystemShutdownW
RegUnLoadKeyW
RegLoadKeyW
RegEnumKeyExW
RegCreateKeyExW
GetUserNameW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
StartServiceW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
shell32
Shell_NotifyIconW
ole32
StringFromGUID2
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
shlwapi
StrTrimA
StrTrimW
setupapi
SetupDiGetDeviceInstanceIdW
CM_Get_Parent
SetupDiDestroyDeviceInfoList
CM_Get_Device_IDW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
rpcrt4
UuidFromStringA
iphlpapi
GetAdaptersInfo
GetInterfaceInfo
GetIfTable
comctl32
_TrackMouseEvent
uxtheme
SetWindowTheme
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ