Static task
static1
Behavioral task
behavioral1
Sample
38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0.exe
Resource
win10v2004-20230915-en
General
-
Target
38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0
-
Size
76KB
-
MD5
bcd42247fb49b775601e0f19c4e085b1
-
SHA1
4214163bc8d601e14a2bff4829a90b8282141cbe
-
SHA256
38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0
-
SHA512
dba6551a1f667e443f47b30b3d633a27cde0d3f91b4bd0e371e8d3b50256754b2d38a9981d618a009ed2a48c844673c997f49600df488a20acd1e6834214d9fe
-
SSDEEP
768:fC3C2g0SRumc+hy3RJT/X+yFfDg6ezjJ319GKHRnojTI6wVHNGEzc:XPumc+h6ftfD4zR6c7zc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0
Files
-
38a6167c7b5d1176ff4d85c67b0ccfdc806f5db858d50e5c0e56ee4bbcdfd6c0.exe windows:5 windows x64
b3dd870b7c3aaa07be67f896ad2b1aa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
GetNameInfoW
FreeAddrInfoW
GetAddrInfoW
WSAAddressToStringW
WSACleanup
WSAStartup
iphlpapi
IcmpSendEcho2
IcmpCloseHandle
Icmp6CreateFile
IcmpCreateFile
Icmp6SendEcho2
msvcrt
__set_app_type
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
__wgetmainargs
_amsg_exit
__setusermatherr
_vsnwprintf
wcsncpy
wcslen
memset
memcpy
wcstoul
malloc
free
exit
kernel32
GetModuleHandleA
LoadLibraryW
DeleteCriticalSection
TlsGetValue
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoW
GetConsoleMode
LockResource
LoadResource
GetProcAddress
GetFileType
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
Sleep
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetStdHandle
SetConsoleCtrlHandler
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ