Static task
static1
Behavioral task
behavioral1
Sample
d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6.exe
Resource
win10v2004-20230915-en
General
-
Target
d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6
-
Size
52KB
-
MD5
4b2caf7f3c0d7ac47917ebf958d769d7
-
SHA1
7465ec0116fc941611fb91b8f66ec12637d185c3
-
SHA256
d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6
-
SHA512
99a38750e12ede5680c20d6dc02c72b82f6abde07faf68511ca32f37ba98d6795ace3335756423a63d370cf5d1941cfaaeda92823a64a65316fc7b9292368ac1
-
SSDEEP
768:LPRYLrlIfnq/+1V3vYHn+s64dBvJpdUJbOJoG1f:LJ+ZmnOmWn+34dRCJaoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6
Files
-
d3a5ed864963c3e4cec3f19ab2ad5bd77fc907c12b17dc95c4af73571c1a81a6.exe windows:4 windows x86
c5f4f2d5eeab6f841685cd192baac5bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
GetLastError
CreateProcessA
OpenProcess
Sleep
GetTempPathA
RemoveDirectoryA
DeleteFileA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetPrivateProfileStringA
GetCurrentProcessId
CopyFileA
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
IsBadWritePtr
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapReAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
FindWindowA
SendMessageA
shell32
SHFileOperationA
wininet
DeleteUrlCacheEntry
shlwapi
SHGetValueA
PathFileExistsA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ