Static task
static1
Behavioral task
behavioral1
Sample
HTTP_Downloader.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
HTTP_Downloader.exe
Resource
win10v2004-20230703-en
General
-
Target
HTTP_Downloader.exe
-
Size
508KB
-
MD5
6928f788524238bb5a3c732e0d10f454
-
SHA1
4d5529105761107ed42cd3e5ce7bb1dc51350614
-
SHA256
9e3562c961a7f878f4a7089e0134eae3e5b4e3797d776910c09548bf7eb4ccf1
-
SHA512
b5c28f586e24100d9a54f779707880ed64ed53b691754b5c32367e958e196ee26f8532b716ef685336ad8aa7d9f4c2dba8e92a4637f404dae6093aafb9567617
-
SSDEEP
12288:fO3uhwhiPworGmkIEMUc1orGmkTVF1F7514ohT644oKikZGB:2+hwEP13tJh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HTTP_Downloader.exe
Files
-
HTTP_Downloader.exe.exe windows x64
cfa86fc0b911b42ff3387cad4109f3aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ReleaseSemaphore
ExitThread
CloseHandle
LeaveCriticalSection
PostQueuedCompletionStatus
TryEnterCriticalSection
WaitForSingleObject
lstrlenW
GlobalAlloc
WideCharToMultiByte
GlobalFree
EnterCriticalSection
InitializeCriticalSection
CreateIoCompletionPort
MultiByteToWideChar
GetFileAttributesW
GlobalReAlloc
GetLastError
MoveFileWithProgressW
CreateThread
CreateSemaphoreW
DeleteCriticalSection
lstrlenA
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLocalTime
DeleteFileW
WriteFile
DeviceIoControl
Sleep
GetQueuedCompletionStatus
WaitForMultipleObjects
SetThreadPriority
GlobalUnlock
GlobalSize
GlobalLock
CreateDirectoryW
GetProcAddress
UnlockFileEx
ReadFile
GetFileSize
LockFileEx
CreateFileW
SetFilePointer
FileTimeToSystemTime
SetFileValidData
SetEndOfFile
SetFilePointerEx
SetFileTime
MoveFileW
SetLastError
lstrcmpiW
lstrcmpW
FreeLibrary
LoadLibraryW
SetErrorMode
lstrcpynW
ExitProcess
ReleaseMutex
GetCurrentProcess
CreateMutexW
GetSystemInfo
LocalFree
GetCommandLineW
GetModuleFileNameW
GetModuleHandleW
lstrcmpA
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
MulDiv
SetThreadExecutionState
lstrcmpiA
user32
SendMessageW
DestroyIcon
SendNotifyMessageW
SetFocus
ScreenToClient
SetLayeredWindowAttributes
GetParent
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ExitWindowsEx
MessageBoxW
GetMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
SetWindowPos
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
RegisterClassExW
LoadCursorW
SetForegroundWindow
ShowWindow
FindWindowW
RegisterClipboardFormatW
LoadImageW
GetSystemMetrics
ReleaseDC
GetDC
SystemParametersInfoW
DestroyMenu
SetMenuItemInfoW
EnableMenuItem
InsertMenuItemW
CreatePopupMenu
CreateMenu
CheckMenuItem
FlashWindow
IsWindowVisible
IsIconic
InvalidateRect
EnableWindow
GetIconInfo
CreateIconIndirect
FillRect
ReleaseCapture
SetScrollInfo
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetScrollInfo
GetClientRect
SetTimer
KillTimer
GetCursorPos
CallWindowProcW
DestroyWindow
GetKeyState
SetCapture
EndPaint
FrameRect
GetSysColor
DrawIconEx
BeginPaint
TrackPopupMenu
ClientToScreen
GetDoubleClickTime
GetWindowDC
TrackMouseEvent
DefWindowProcW
DrawTextW
SendMessageA
MapWindowPoints
GetWindow
GetFocus
IsZoomed
GetWindowRect
GetClipboardData
IsClipboardFormatAvailable
GetMonitorInfoW
MonitorFromWindow
LoadIconW
PostMessageW
GetSysColorBrush
LockWorkStation
SetCursor
OffsetRect
MonitorFromRect
RegisterWindowMessageW
SetMenu
PostQuitMessage
ScrollWindow
SetScrollPos
DrawFocusRect
Sections
.text Size: 438KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ