Static task
static1
Behavioral task
behavioral1
Sample
355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d.exe
Resource
win10v2004-20230915-en
General
-
Target
355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d
-
Size
2.0MB
-
MD5
cd89e8eab235ed3b9476cc401ef3b91f
-
SHA1
39f3791e1c2e0d4e005329f3bda1141f81896919
-
SHA256
355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d
-
SHA512
645fe0a4e8ec9dc9a1f092b0503377bf809f9b6d1e918d4878313f3c76aac83386f6404518fe1e56136535d6f24488a8dba4a64eca4ee02b46c9ce5f1898daec
-
SSDEEP
24576:6pJwsknxaPeDJXXVr6fqkWj9FYnvHmerRW6RGieK8PEMoXsQnBXrP3I2IvrrP3bZ:6pD0J1HiHg6RUFEMusQn5r422rTm2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d
Files
-
355fc21d8cf2c9c62f93fb8376c1dc7e6e50b42465877f1cf4c2f91ac2bf818d.exe windows:4 windows x86
b5cbf950d7004d3d65fa62b962588430
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateToolhelp32Snapshot
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA
WriteFile
GetStdHandle
DeleteFileA
CreateFileA
ReadConsoleA
ReadFile
GetFileSize
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
user32
GetMessageA
FindWindowA
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetOpenA
msvcrt
strstr
_getch
malloc
realloc
strchr
rand
srand
_ftol
atoi
sprintf
free
shlwapi
PathFileExistsA
oleaut32
VariantTimeToSystemTime
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ