Static task
static1
General
-
Target
10a3e2673f296e7c92fc0f7df5120390a0d25081c95d919fa8b5d5bbf7e6c4f1
-
Size
4.8MB
-
MD5
0803c89d362fe0febe13bd092ef98ed1
-
SHA1
036ec692eaffb018e360fd201000cfb4d9c89790
-
SHA256
10a3e2673f296e7c92fc0f7df5120390a0d25081c95d919fa8b5d5bbf7e6c4f1
-
SHA512
6d3cb36af5d2494ae288ed430c742372ef12ad7042b3cd7dacfe8ba839d9c342148d94129f5a3a5a1c59fbfb083cec413f9f68fb245b9d50e85d0769a87b1919
-
SSDEEP
98304:yM8J+8omYJANECGB4s1ttmyUyASGifO7B1cbgarT7rxEXG8B5X/:gJvYmHe4s1ayUSNfOXGHnqGe1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 10a3e2673f296e7c92fc0f7df5120390a0d25081c95d919fa8b5d5bbf7e6c4f1
Files
-
10a3e2673f296e7c92fc0f7df5120390a0d25081c95d919fa8b5d5bbf7e6c4f1.exe windows x86
1779b49e339a4992a1e5095de91944cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetSystemMetrics
CharUpperBuffW
gdi32
CreateCompatibleBitmap
advapi32
RegCloseKey
shell32
SHGetFolderPathA
wininet
HttpOpenRequestA
gdiplus
GdipSaveImageToFile
Sections
.text Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..zip0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
..zip1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..zip2 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ