Static task
static1
Behavioral task
behavioral1
Sample
ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600.exe
Resource
win10v2004-20241007-en
General
-
Target
ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600
-
Size
208KB
-
MD5
f9f19f161feb6743dd7059b71c53982b
-
SHA1
559d105c04102403aba5112ba3c05e9b653f75c4
-
SHA256
ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600
-
SHA512
6d0dc5e85654ecf2fcbab25c234c2e95ae4a35c498270bb47de9f0291ebcefa55693a7bde64b7abd84d0d5e057a018904c117405bb230b1534211e9ab4d612fb
-
SSDEEP
6144:QZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:equCuygMQjd5vJIBP1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600
Files
-
ad857f6c3ddcec462a918e4cbda2982493d17d774b6a439b4f7e45854076c600.exe windows:4 windows x86 arch:x86
520c130e82cbe6120da2d52c754c2522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA
user32
GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor
gdi32
CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx
advapi32
RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey
shlwapi
StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW
opengl32
glReadBuffer
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PwM Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OwvyT Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MTxF Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XWRUxX Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YCYo Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tKhtUt Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ