Static task
static1
Behavioral task
behavioral1
Sample
bdb19d9eb19343708fbcc36acfaa91699e89d68643c75bf90c6d1e57adaf0d3d.exe
Resource
win10v2004-20250314-en
General
-
Target
bdb19d9eb19343708fbcc36acfaa91699e89d68643c75bf90c6d1e57adaf0d3d.exe
-
Size
153KB
-
MD5
019b65ccaabcf519b65645284966db57
-
SHA1
76fbee514ec7d0b666b10ebfa98bc3197ebde8cd
-
SHA256
bdb19d9eb19343708fbcc36acfaa91699e89d68643c75bf90c6d1e57adaf0d3d
-
SHA512
09c0c819873498f6d6e3a3d1db94cefd6427c380ba74cd31d185c130934fa92918fef05b5737b96a96b0c7ba2f197d562bbf568d7af540a2f5ae6de93e2df827
-
SSDEEP
1536:oeTqb5QIul2hD/S8+5hFg2NRrlSYDLGRxHwEEaY4qr6leWvebuFD0MCu7sWZcdGv:Kb45hmjqGR2l/mlHaMwGkHJhqjLcCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdb19d9eb19343708fbcc36acfaa91699e89d68643c75bf90c6d1e57adaf0d3d.exe
Files
-
bdb19d9eb19343708fbcc36acfaa91699e89d68643c75bf90c6d1e57adaf0d3d.exe.exe windows:5 windows x86 arch:x86
6fc7db09c5144cfb86f05772e2fc3008
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetCommandLineW
FindNextFileW
GetCurrentProcess
lstrlenW
WriteFile
InterlockedDecrement
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
SetErrorMode
GetQueuedCompletionStatus
FindClose
CreateFileW
ResumeThread
lstrcatA
GetModuleHandleA
PostQueuedCompletionStatus
SetFileAttributesW
Sleep
GetLastError
InterlockedExchangeAdd
CloseHandle
HeapFree
LoadLibraryW
CreateThread
HeapAlloc
GetProcAddress
LocalFree
DeleteCriticalSection
ExitProcess
GetProcessHeap
SystemTimeToFileTime
InterlockedIncrement
GetSystemTime
lstrcmpiW
CreateIoCompletionPort
GetTickCount
lstrcmpW
MoveFileW
GetDriveTypeW
QueryPerformanceCounter
HeapReAlloc
HeapSize
WriteConsoleW
GetFileSizeEx
FindFirstFileW
CancelIo
GetLogicalDrives
GetSystemInfo
ReadFile
FlushFileBuffers
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
DecodePointer
FindNextFileA
FindFirstFileExA
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetACP
SetFilePointerEx
GetConsoleMode
GetFileType
LCMapStringW
user32
CharLowerW
wsprintfW
advapi32
CryptGenRandom
CryptReleaseContext
OpenProcessToken
SetThreadToken
GetTokenInformation
CryptAcquireContextW
shell32
CommandLineToArgvW
SHEmptyRecycleBinA
ole32
CoSetProxyBlanket
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysAllocString
SysFreeString
VariantInit
shlwapi
wnsprintfA
StrStrW
mpr
WNetEnumResourceW
WNetCloseEnum
WNetOpenEnumW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ