Static task
static1
Behavioral task
behavioral1
Sample
c3d72f4add74dc237c74f037f23c623c3b2306c2f9fbe2bd90f8ef744a0bd424.exe
Resource
win7-20230712-en
General
-
Target
c3d72f4add74dc237c74f037f23c623c3b2306c2f9fbe2bd90f8ef744a0bd424
-
Size
1.3MB
-
MD5
a118cdc2fa88c3aa6de6b603137b0e72
-
SHA1
cec114df33408d11569aa090614d24273903644c
-
SHA256
c3d72f4add74dc237c74f037f23c623c3b2306c2f9fbe2bd90f8ef744a0bd424
-
SHA512
7cfc0fc3c609ac0b18348688cd6a4fac60190e878dc647ef8e6a43abf6839165a81fd92399bdd420b716f2bf5e687025f56aa9e3ad455fd9d77369115248aae2
-
SSDEEP
24576:4UDiL4Tv40a1YqWdHxVytNHbnDofDdiQMcR0Cv+/USNz/2U:3DHTwl1YqWdHSt27diQzR0Cv/Sxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3d72f4add74dc237c74f037f23c623c3b2306c2f9fbe2bd90f8ef744a0bd424
Files
-
c3d72f4add74dc237c74f037f23c623c3b2306c2f9fbe2bd90f8ef744a0bd424.exe windows x86
b70a5c3df2fb546792d4acbec9951bb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.data Size: 597KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 727KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ