Static task
static1
Behavioral task
behavioral1
Sample
28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585.exe
Resource
win10v2004-20230915-en
General
-
Target
28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585
-
Size
48KB
-
MD5
1ca765f5fbf45d837e871f39f468dc7d
-
SHA1
c02743c52f05c3f1da26c94b648842c1c6d7a399
-
SHA256
28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585
-
SHA512
5ba709794929a5401db4a6513e919dac0605a170d3374014fee8d28f486d188b9534f774c813e2f081ed13e3536ef95d735dcfd295b832ce6d35463fa271401f
-
SSDEEP
768:ImHtU9qwn5TCPI2O5sapj/eJX031NrtS9L7zjg8XKKtRWpwWfE/VGn8ihrzt7NtW:tHy9q+5TCw2O5Nj2JX031htS9L7zjg8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585
Files
-
28638e4493b2dbbb654fc50701ae3136eeadf5bc0639188e2c1f9a85430c1585.exe windows:4 windows x86
2928a5aa1bcd05a5cf1f77d0862ac9ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
iphlpapi
GetAdaptersAddresses
GetNetworkParams
kernel32
FormatMessageW
GetModuleHandleW
GetOEMCP
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpW
ucrtbase
__p___argc
__p___wargv
__stdio_common_vswprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_wcsicmp
exit
free
malloc
memcpy
realloc
user32
LoadStringW
ws2_32
WSAStartup
WSACleanup
WSAAddressToStringW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 288B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ