Static task
static1
Behavioral task
behavioral1
Sample
f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9.exe
Resource
win10v2004-20230703-en
General
-
Target
f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9
-
Size
124KB
-
MD5
c473dc6f559de769187d5a9cca86c2eb
-
SHA1
d17e4110af734e395cc50c7e554c52e73ac6e219
-
SHA256
f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9
-
SHA512
4cc854e7865bca2bd931187255fc5a678b2c29f8333894c6ffe83de4de091b84cee1c87cb9363b247fe5d15dffb9d2a3e790bc845289327b7ea4c520696991ed
-
SSDEEP
3072:6Y1kyF5tTe6gOYPY95qrB5gpwkG2XGIOVHlU7H3v1/MACubCdlKjs54nntspSnf2:6Y1rF5tTe6gOYPY95qrB5gpwkG2XGIOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9
Files
-
f74494491ad9de02a22aaffbdac8e53853a6c570a207f0b65ff0946f177577b9.exe windows x86
d387493f99c7a70591c9f021eca7caf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
dnsapi
DnsFlushResolverCache
DnsGetCacheDataTable
DnsQuery_W
DnsRecordListFree
iphlpapi
GetAdaptersInfo
GetIfEntry
GetInterfaceInfo
GetNetworkParams
GetPerAdapterInfo
IpReleaseAddress
IpRenewAddress
kernel32
DeleteCriticalSection
EnterCriticalSection
FindResourceA
FormatMessageA
GetComputerNameExA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcmpA
lstrlenA
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_stricmp
_strnicmp
_unlock
abort
asctime
calloc
exit
fprintf
free
fwrite
localtime
malloc
memmove
printf
putchar
puts
signal
sprintf
strncmp
vfprintf
user32
CharToOemA
LoadStringA
wsprintfA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 27KB - Virtual size: 27KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ