Static task
static1
Behavioral task
behavioral1
Sample
Download_Ready_560620.exe
Resource
win11-20241007-en
General
-
Target
Download_Ready_560620.exe
-
Size
8.8MB
-
MD5
8fb70fc1996d4f4dfb8a75ecf50dad0f
-
SHA1
e2fd0c82ddba67371923baee028cdc8db4b064d8
-
SHA256
71bb4399526980b01df645e1a7d845cb62c36b42cf0ad85982aad965f4531a34
-
SHA512
739bd62a2a8670eea2293d59d45704b7d2c3afaf9fccffd341143e58dfd2719a43ad20249954777af9d0b15e5b972b159e2f9bbb8de5ba9143b0d03d99276a5b
-
SSDEEP
196608:YKCRb2mzUsSISGOUqRPvOj598zzE7lCAlA5C8rphiEzv:OtHU4O9NuYEpP8loED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Download_Ready_560620.exe
Files
-
Download_Ready_560620.exe.exe windows:6 windows x86 arch:x86
e8daf068770626a422139755b4f65210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathFileExistsW
kernel32
CreateEventA
GetConsoleMode
LeaveCriticalSection
FreeEnvironmentStringsW
SetFileTime
CreateDirectoryA
FlushFileBuffers
VirtualAlloc
GetSystemTimeAsFileTime
FormatMessageW
GetSystemDirectoryW
GetLocaleInfoW
GetFileSize
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
GetCurrentThreadId
HeapAlloc
HeapSize
GetFileInformationByHandle
EnumSystemLocalesW
SetFilePointer
IsValidLocale
DeleteFileA
WriteFile
MultiByteToWideChar
AreFileApisANSI
ExitThread
TlsSetValue
FindNextFileA
GlobalMemoryStatus
GetVersionExA
GetModuleFileNameA
GetEnvironmentStringsW
lstrlenW
SetEndOfFile
GetCurrentProcess
DecodePointer
GetProcAddress
GetStartupInfoW
CreateFileW
FindFirstFileA
RemoveDirectoryW
GetFileAttributesA
LoadLibraryA
RtlUnwind
GetFileType
GetUserDefaultLCID
lstrcatW
LoadLibraryW
IsValidCodePage
GetStdHandle
FreeLibrary
DeleteFileW
FindFirstFileExW
SetEvent
WaitForSingleObject
HeapFree
SetLastError
VirtualFree
InitializeCriticalSectionEx
EnterCriticalSection
EncodePointer
SetFileAttributesW
WriteConsoleW
InitializeCriticalSection
CreateDirectoryW
GetProcessHeap
GetCurrentDirectoryW
CreateFileA
RaiseException
QueryPerformanceCounter
GetNativeSystemInfo
RemoveDirectoryA
FormatMessageA
GetTickCount64
FindNextFileW
CreateSemaphoreA
WideCharToMultiByte
LCMapStringEx
CloseHandle
CreateThread
GetSystemWow64DirectoryW
GetCurrentDirectoryA
DeleteCriticalSection
ResetEvent
TlsGetValue
InitializeSListHead
GetTickCount
LocalFree
SetFilePointerEx
FindFirstFileW
GetTempPathW
TlsFree
IsBadReadPtr
ReleaseSemaphore
VirtualProtect
InitializeCriticalSectionAndSpinCount
GetACP
GetTempPathA
GetLastError
ExitProcess
GetFileAttributesW
GetCommandLineA
UnhandledExceptionFilter
GetSystemInfo
GetOEMCP
GetCommandLineW
GetModuleHandleW
FreeLibraryAndExitThread
Sleep
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
SetFileAttributesA
GetConsoleOutputCP
GetCPInfo
FindClose
SetStdHandle
TlsAlloc
GetStringTypeW
LoadLibraryExW
LCMapStringW
GetModuleHandleExW
ReadFile
GetProcessAffinityMask
TerminateProcess
GetModuleFileNameW
HeapReAlloc
user32
GetWindowLongA
DialogBoxParamA
LoadStringA
EndDialog
SetWindowLongA
SetTimer
CharUpperA
ShowWindow
SetWindowTextA
SendMessageA
PostMessageA
SetWindowTextW
GetDlgItem
LoadStringW
LoadIconA
KillTimer
DialogBoxParamW
DestroyWindow
MessageBoxW
CharUpperW
shell32
SHGetSpecialFolderPathW
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Sections
.text Size: 917KB - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ