Static task
static1
Behavioral task
behavioral1
Sample
InetMgr.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
InetMgr.exe
Resource
win10v2004-20230703-en
General
-
Target
InetMgr.exe
-
Size
122KB
-
MD5
676ba3a4f6fc73df7da31c0b9fcf4d6b
-
SHA1
37a7eeb62cd929260b657ca4d60655142ad91b70
-
SHA256
4e2518a97dc97f37626054797cc80b3d0877e84f6b577cbb4609716cc56cacea
-
SHA512
f08b56666f217579135eccd4170fedc0134514c557d4b413f9be68b11a160642a04d2a523bec91e9359222674e9dff037b0a77024d8ee7192a1aca1862bfd0ed
-
SSDEEP
3072:9fTjI940w3oh7PR3i3RLchg5O++FL034Xp:5IetoJFihLt3A+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource InetMgr.exe
Files
-
InetMgr.exe.exe windows x64
cde1ac8140c2b3c96a7df74ad9ff9d70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
GetCommandLineW
GlobalFree
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
TerminateProcess
user32
MessageBoxW
LoadStringW
msvcrt
_exit
?terminate@@YAXXZ
_commode
_fmode
_acmdln
_cexit
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_callnewh
malloc
free
_wcsicmp
wcscat_s
wcscpy_s
ole32
CoInitializeEx
CoInitializeSecurity
shlwapi
PathAppendW
PathRemoveFileSpecW
shell32
CommandLineToArgvW
ShellExecuteW
mscoree
ClrCreateManagedInstance
LoadLibraryShim
CorBindToRuntimeEx
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ