Static task
static1
Behavioral task
behavioral1
Sample
b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297N.exe
Resource
win10v2004-20241007-en
General
-
Target
b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297N
-
Size
4.1MB
-
MD5
c5b64dd6ed30b6557b840c96bd6512a0
-
SHA1
22e0f4b2154b5a49cb30ea9cb51d29088b439036
-
SHA256
b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297
-
SHA512
3baee5b05bc2fe0c341f00a003823d319f7107c5e21f8c3c20cb30bc9d631008d5e1b5447b14a8048f7337076aee585f709594b2b6c50916559c6233bcee95cf
-
SSDEEP
98304:cGrZtfPT7D4MOJdFcmfQ2t3iad1SZuV5EvxX0:c6fL4XJsmYCy2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297N
Files
-
b77b5549421d667cdba5597677914e4e5630a379e34783753d5b20c1d8558297N.exe windows:4 windows x86 arch:x86
0c082437c46408045029846370ccfb08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupOpenInfFileW
SetupDiBuildDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoW
SetupDiGetClassDescriptionW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupFindFirstLineW
SetupFindNextLine
SetupGetStringFieldW
SetupCloseInfFile
kernel32
GetProcAddress
LoadLibraryW
GetFileType
LoadLibraryA
LeaveCriticalSection
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
CreateProcessA
CloseHandle
CompareStringA
CompareStringW
ConvertDefaultLocale
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnumResourceLanguagesW
EnumSystemLocalesA
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeResource
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
FreeLibrary
GetThreadLocale
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
RtlUnwind
GetVersion
GetCurrentProcess
GetEnvironmentVariableA
GetSystemTimeAsFileTime
GlobalFree
user32
GetKeyState
GetDlgCtrlID
GetKeyboardLayout
MessageBoxA
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
WinHelpW
WindowFromPoint
ValidateRect
advapi32
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
LookupPrivilegeValueW
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gss7 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 516KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fss7 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE