Static task
static1
Behavioral task
behavioral1
Sample
d2d61100f0634c9703b4cb8f0bb5de3a135238531fd11b1cdc7f0dfe9c297925N.exe
Resource
win7-20240903-en
General
-
Target
d2d61100f0634c9703b4cb8f0bb5de3a135238531fd11b1cdc7f0dfe9c297925N
-
Size
964KB
-
MD5
3f2b108b33b346f9117f2da38bda6d80
-
SHA1
e56d324ec816edc7e8d698a437a65a626d25d3aa
-
SHA256
d2d61100f0634c9703b4cb8f0bb5de3a135238531fd11b1cdc7f0dfe9c297925
-
SHA512
ca960bccdf7d4e5a12e6162930e56dba8790fe7241e084859ca4fcdd3b7c61f3c9d3f37965ac2b1165d13f1c36ca2f4aaa2f9cfbc4d56f98e32d828881d2f0de
-
SSDEEP
24576:UqIrYCA73bCxx/7Ey/zHxRUMc878Dxxv/WrEH7J:fIrqLpyr/5coc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d61100f0634c9703b4cb8f0bb5de3a135238531fd11b1cdc7f0dfe9c297925N
Files
-
d2d61100f0634c9703b4cb8f0bb5de3a135238531fd11b1cdc7f0dfe9c297925N.exe windows:5 windows x86 arch:x86
f07315c53855bf79c8d8b8795791d6f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
kernel32
SetLastError
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
WideCharToMultiByte
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
FreeLibrary
LoadLibraryExA
lstrcmpiA
IsDBCSLeadByte
GetTickCount
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
ReadFile
CreateEventA
SetCommTimeouts
GetCommTimeouts
SetCommState
GetCommState
PurgeComm
SetCommMask
SetEvent
ClearCommError
GetOverlappedResult
WaitForSingleObject
ResetEvent
WaitCommEvent
GetCommMask
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
RaiseException
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetFullPathNameA
ExitProcess
HeapCreate
GetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
LCMapStringW
LCMapStringA
TlsFree
WritePrivateProfileStringA
GetCurrentProcess
OpenFile
FindClose
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
_lclose
CloseHandle
GetLastError
LocalFree
LocalAlloc
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetModuleFileNameA
GetCurrentThreadId
GetPrivateProfileStringA
CreateThread
Sleep
lstrcpyA
GetFileAttributesA
lstrlenA
CreateDirectoryA
FileTimeToLocalFileTime
FindFirstFileA
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
WriteConsoleW
UnhandledExceptionFilter
TerminateProcess
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
user32
SetWindowPos
MapWindowPoints
EndDialog
SystemParametersInfoA
GetWindowLongA
GetWindowRect
GetClientRect
GetParent
SetWindowLongA
CharNextA
ShowWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
CreateDialogParamA
DefWindowProcA
SetWindowRgn
IsDialogMessageA
MessageBoxA
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
UnregisterClassA
DestroyWindow
DialogBoxParamA
ExitWindowsEx
GetActiveWindow
PostQuitMessage
GetSystemMetrics
LoadImageA
wsprintfA
InvalidateRect
LoadBitmapA
ReleaseCapture
SendMessageA
ClientToScreen
GetSysColor
FillRect
GetCapture
GetCursorPos
WindowFromPoint
GetWindow
gdi32
SetBkMode
GetStockObject
BitBlt
CreateRectRgn
GetPixel
CombineRgn
StretchBlt
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
DeleteDC
SelectObject
advapi32
RegOpenKeyExA
LookupPrivilegeValueA
OpenProcessToken
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
shell32
SHFileOperationA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
_TrackMouseEvent
ws2_32
htons
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ