Static task
static1
Behavioral task
behavioral1
Sample
7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N.exe
Resource
win10v2004-20241007-en
General
-
Target
7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N
-
Size
164KB
-
MD5
3fe7c9f01e5585217ec6a5b9ea94ea90
-
SHA1
d139af1c8b537eb1f17fe1ec538fce0b09d3acb1
-
SHA256
7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351
-
SHA512
918ef7a9e7d48787340da9f908529252104a622ab3cff0538583501c2e8289d8a9dfe7e146b6117bd8e4fd3d0ec99fdf484eab15a80071e4e23384fae9f09e5b
-
SSDEEP
1536:uZJSmOK0Tn1EIIQoKkbsi2diCnGBY6nq9t6bLIZGwWuy6tU5t5918oJnp:uZJS7K0jsAIY6nCtY3wN1i6oJp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N
Files
-
7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N.exe windows:5 windows x86 arch:x86
cc0d0c18c0512882beb75c1e8e0f63b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCPInfo
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
GetACP
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleW
SetStdHandle
CreateFileW
CreateFileA
LocalFree
CloseHandle
LoadLibraryA
GlobalFree
GetProcAddress
GetLastError
ReadFile
HeapCreate
GlobalAlloc
WriteFile
GetTickCount
GetCurrentProcess
HeapAlloc
lstrlenA
GetFileSize
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetStdHandle
GetModuleFileNameW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
ClientToScreen
DestroyWindow
ScreenToClient
InsertMenuItemA
PostQuitMessage
SendDlgItemMessageA
TrackPopupMenu
FillRect
LoadImageW
IsZoomed
GetSubMenu
SetMenuItemBitmaps
LoadMenuA
LoadIconA
GetClientRect
EnumWindows
PtInRect
GetDC
GetMenu
CheckMenuRadioItem
MessageBoxA
InvalidateRect
ReleaseDC
EnableMenuItem
SetClassLongA
DefWindowProcA
GetDesktopWindow
GetSysColor
GetMenuItemInfoA
ShowWindow
CreatePopupMenu
DrawMenuBar
GetMenuItemCount
IsWindow
PostMessageA
GetSystemMetrics
CloseWindow
UpdateWindow
DestroyMenu
SetMenuItemInfoA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
GetWindow
MoveWindow
gdi32
MoveToEx
PatBlt
LineTo
DeleteDC
SetPixel
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
Ellipse
CreatePen
SetROP2
TextOutW
GetStockObject
CreateSolidBrush
comdlg32
GetOpenFileNameA
advapi32
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
SetNamedSecurityInfoA
SetEntriesInAclA
OpenProcessToken
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ