Static task
static1
Behavioral task
behavioral1
Sample
80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67N.exe
Resource
win10v2004-20241007-en
General
-
Target
80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67N
-
Size
424KB
-
MD5
427f77d8ed22b8e092aa5b06578d9300
-
SHA1
6fa46ca549b8f52f21f769b4e19e5f8dd4a9ba57
-
SHA256
80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67
-
SHA512
89bd0577ed9b989c7792214de584255d600550638cddcc4194ec5160abc2b5c48745dac2c9623a27964a0807436e3d68d774565d69f65c984f8ac46ceeee0b89
-
SSDEEP
12288:v16h5mf3I2iwDzgn3Y5h6sriJdtt9ryg4Wr2:vQXa3Kw/gnShktt9WJo2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67N
Files
-
80ec12742318b0eb9ca57a44d77e86b03d300200e55a829765fde8fd04a29e67N.exe windows:4 windows x86 arch:x86
c0ce479eb4f5b4c7b56540449bc60d8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetLastError
GetLogicalDrives
ResetEvent
VirtualProtect
HeapCreate
SetErrorMode
RaiseException
GetStdHandle
GetCommandLineA
LoadLibraryExA
GetACP
CloseHandle
InterlockedExchange
GetSystemDirectoryA
Sleep
SetEvent
ReleaseMutex
GetLocaleInfoA
FindFirstFileExA
EnterCriticalSection
user32
GetWindow
BeginPaint
GetActiveWindow
ReleaseDC
GetParent
SetForegroundWindow
GetFocus
wsprintfA
IsIconic
GetCursorPos
ValidateRect
GetClassNameA
DrawTextA
FillRect
GetWindowTextA
ShowWindow
FlashWindowEx
EndPaint
FrameRect
dsound
DllGetClassObject
GetDeviceID
DirectSoundEnumerateA
DirectSoundCreate
DirectSoundCaptureCreate
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ