Static task
static1
Behavioral task
behavioral1
Sample
569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f.exe
Resource
win10v2004-20241007-en
General
-
Target
569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f.exe
-
Size
98KB
-
MD5
ee63fb1c7a9e0f03d8a208fe6f8b3bca
-
SHA1
744192744b98ecc09591762e1c81b575aa23675a
-
SHA256
569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f
-
SHA512
6e799cbb675284e698bdc7c0ef5497c0a0302a6263a53b43c16b9f0be3aa2c80d3efeb69cd8a73b616159928d4128c64dcab74adb86db542a6afcbbe72682034
-
SSDEEP
1536:Ww4tuBPgEz9ZgtcGG/N7QgA7ivX+b88BRsinC/EqRzzhuB0CXysYnLZ2+CAiECbI:6ueEzScN0gAm+b88BqinTczzkYjCVbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f.exe
Files
-
569d8c6812b4a2dd0d2568f27e7e74417229a8fbe066c88e0f54f1e7070e463f.exe.exe windows:5 windows x86 arch:x86
6aa52cb3c86c1d296792a6189342b246
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CASetCertTypeFlags
CAFreeCertTypeProperty
CARemoveCACertificateType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CAGetCAProperty
CASetCertTypeProperty
CAFreeCAProperty
CASetCertTypeKeySpec
CACloseCA
CAGetCertTypeFlags
CAUpdateCertType
CASetCertTypeExtension
CAEnumCertTypes
CACertTypeSetSecurity
CAGetCertTypePropertyEx
CAGetCertTypeKeySpec
CAEnumNextCertType
CAAddCACertificateType
CAFindByName
CACloseCertType
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA
CACertTypeGetSecurity
CAGetCertTypeProperty
CACreateCertType
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
kernel32
QueryPerformanceCounter
lstrcmpiW
GlobalAlloc
InterlockedIncrement
GetCPInfo
OutputDebugStringW
GetModuleFileNameW
InitializeCriticalSection
OutputDebugStringA
GetLastError
LocalReAlloc
LocalFree
LoadLibraryW
SetLastError
GlobalLock
GetTickCount
GetEnvironmentStringsW
GetSystemWindowsDirectoryW
GetSystemDefaultLangID
FileTimeToLocalFileTime
CreateFileW
FormatMessageW
GetModuleHandleA
GetStartupInfoA
lstrlenW
RemoveDirectoryA
CloseHandle
FileTimeToSystemTime
GetProcAddress
DeleteCriticalSection
SetUnhandledExceptionFilter
WideCharToMultiByte
GetCurrentProcess
GetComputerNameW
GetDateFormatW
GetSystemTimeAsFileTime
lstrcpyW
GlobalUnlock
InterlockedDecrement
GlobalFree
IsBadReadPtr
user32
SetFocus
GetDC
LoadStringW
GetDlgItemTextA
GetParent
SendDlgItemMessageW
PostMessageW
ReleaseDC
InsertMenuItemW
GetWindowLongW
LoadBitmapW
EndDialog
wsprintfW
LoadIconW
SendMessageW
SetCursor
DialogBoxParamW
SetWindowTextW
MessageBoxW
SystemParametersInfoW
LoadCursorW
RegisterClipboardFormatW
WinHelpW
GetDlgItem
SetDlgItemTextW
LoadImageW
EnableWindow
SetWindowLongW
msvcrt
mbstowcs
_wcsupr
wcslen
wcscmp
wcscpy
memmove
__dllonexit
__RTDynamicCast
wcsrchr
_except_handler3
malloc
_wcsicmp
wcsstr
?terminate@@YAXXZ
free
wcstoul
??1type_info@@UAE@XZ
wcschr
??2@YAPAXI@Z
_initterm
wcscat
_onexit
vswprintf
??3@YAXPAX@Z
_adjust_fdiv
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ