Static task
static1
Behavioral task
behavioral1
Sample
443e054bf72981614c4199e4f1dfd6cd55a75e534fc3bdd79ecbce0d014dd81cN.exe
Resource
win7-20240903-en
General
-
Target
443e054bf72981614c4199e4f1dfd6cd55a75e534fc3bdd79ecbce0d014dd81cN.exe
-
Size
359KB
-
MD5
f23299c82d17ded35b0a92d9b6e34750
-
SHA1
7ade41c41a25cbe4847d40cad333f828b09d989e
-
SHA256
443e054bf72981614c4199e4f1dfd6cd55a75e534fc3bdd79ecbce0d014dd81c
-
SHA512
b9229dbced69ebbbc3d14d23e84ae5a3c02aed837fcbba18addffa58cae934371720269c731b7837e05dde23edd64ed3bf593c115bfc0956c63c3253c918e9c1
-
SSDEEP
6144:wuhHIXlzsKP69W4OGt2/Lb2JYzr0brKP:XhnJa02/+uzI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 443e054bf72981614c4199e4f1dfd6cd55a75e534fc3bdd79ecbce0d014dd81cN.exe
Files
-
443e054bf72981614c4199e4f1dfd6cd55a75e534fc3bdd79ecbce0d014dd81cN.exe.exe windows:5 windows x86 arch:x86
af1997c7384baa0282768936c00b569a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathW
SetThreadContext
DeleteTimerQueueEx
DebugActiveProcessStop
CreateProcessW
SetWaitableTimer
InterlockedDecrement
SetDefaultCommConfigW
GetEnvironmentStringsW
SetComputerNameW
GetProcessPriorityBoost
GetModuleHandleW
GetCurrentThread
GlobalAlloc
GetVersionExW
GetTimeFormatW
GetConsoleAliasW
GetVolumePathNameA
GetStartupInfoW
GetStartupInfoA
SetLastError
GetProcAddress
GetLongPathNameA
GetAtomNameA
LoadLibraryA
UnhandledExceptionFilter
InterlockedExchangeAdd
MoveFileA
AddAtomA
FoldStringA
OpenFileMappingW
GetFileTime
FindAtomW
FindFirstVolumeW
GetModuleHandleA
GetCommandLineA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetStdHandle
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
HeapSize
RaiseException
user32
GetProcessDefaultLayout
Sections
.text Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nimu Size: 1024B - Virtual size: 997B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vebuxi Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kelu Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ