Static task
static1
Behavioral task
behavioral1
Sample
d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878dN.exe
Resource
win10v2004-20241007-en
General
-
Target
d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878dN
-
Size
99KB
-
MD5
432c39f379aed51181687751fb3088f0
-
SHA1
ea6ba29e31f2ce9748a63011a236a010d915c4ee
-
SHA256
d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878d
-
SHA512
5052009fab018a68390a9a8ee08d617788dea7a22c335c6661e05f5bf464c84cf75f6f90e82f421cec165458a6d2f66c3739edbde928fc32299f1a29dc1dd454
-
SSDEEP
1536:sx4pd8GLHyyCKi8jguEXXuAn2yHlcWMHDj1DMFR8LtqoM:ueRWyCKNbLIlcWMHDj1DMyQv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878dN
Files
-
d880aaca91bfa4f10ea845ab1a6b734fc9f20198c8b42cb74671e58f0afc878dN.exe windows:5 windows x86 arch:x86
c2046726e10a8f02c074e51a06bafe34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
CreateThread
VirtualFree
CreateIoCompletionPort
SetThreadPriority
ReadFile
WaitForSingleObject
DeleteFileW
DeleteCriticalSection
CreateFileW
GetLastError
GetThreadPriority
GetEnvironmentStringsW
GetCurrentProcess
InitializeCriticalSection
IsBadWritePtr
SetUnhandledExceptionFilter
HeapFree
GetFullPathNameW
CreateSemaphoreW
MultiByteToWideChar
lstrlenA
GetStartupInfoA
GetModuleFileNameA
WriteFile
WaitForMultipleObjects
GetFileSize
GlobalFree
InterlockedIncrement
lstrcpyA
CreateEventW
GetProfileIntA
GlobalMemoryStatus
GlobalUnlock
GetCurrentProcessId
GetDiskFreeSpaceW
SetEvent
GlobalLock
GetSystemDefaultLangID
lstrcpyW
MulDiv
lstrcmpiW
LoadLibraryW
GetVersionExW
LeaveCriticalSection
GetProcessHeap
lstrcpynW
InterlockedDecrement
GetCPInfo
WideCharToMultiByte
GetSystemTimeAsFileTime
GlobalHandle
GetFileAttributesW
SetFilePointer
GetQueuedCompletionStatus
GetPrivateProfileStringW
lstrcmpW
InterlockedExchange
lstrlenW
IsBadReadPtr
OutputDebugStringA
CloseHandle
QueryPerformanceCounter
GetTickCount
ResetEvent
FreeLibrary
IsBadCodePtr
GetCurrentThread
ReleaseSemaphore
GetSystemInfo
HeapAlloc
SetEndOfFile
EnterCriticalSection
PostQueuedCompletionStatus
IsBadHugeReadPtr
advapi32
RegEnumKeyW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
gdi32
PatBlt
SelectObject
GetTextExtentPoint32W
GetPaletteEntries
GetObjectW
GetStockObject
user32
TranslateMessage
GetDlgItem
ShowWindow
PeekMessageW
IsWindowVisible
GetDC
GetAsyncKeyState
SetDlgItemTextW
SetDlgItemInt
LoadCursorW
GetWindowRect
ClientToScreen
InvalidateRect
MoveWindow
IsRectEmpty
GetDesktopWindow
CheckDlgButton
SetCursor
SetWindowLongW
ReleaseDC
EnableWindow
GetClientRect
DispatchMessageW
CreateDialogParamW
DefWindowProcW
IsWindow
LoadStringW
wsprintfW
CheckRadioButton
GetDlgItemInt
SendMessageW
DestroyWindow
GetWindowLongW
msvcrt
wcslen
??3@YAXPAX@Z
_ftol
_except_handler3
_purecall
??2@YAPAXI@Z
ole32
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
winmm
waveInUnprepareHeader
waveInGetDevCapsW
mixerGetControlDetailsW
waveInStart
mixerGetID
SendDriverMessage
OpenDriver
waveInPrepareHeader
waveInReset
mixerSetControlDetails
waveInClose
mixerGetLineControlsW
mixerClose
waveInStop
CloseDriver
waveInOpen
mixerOpen
mixerGetLineInfoW
waveInAddBuffer
msvfw32
ICCompress
ICSendMessage
ICGetInfo
ICLocate
ICClose
ICDecompress
ICOpen
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ