Static task
static1
Behavioral task
behavioral1
Sample
3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a.exe
Resource
win10v2004-20231020-en
General
-
Target
3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a
-
Size
440KB
-
MD5
0e50b1a7e971d9dd18676a7314d30d05
-
SHA1
a7a9ec50d67f9feee95597068083093a54658c69
-
SHA256
3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a
-
SHA512
fcf4c1554c54fc3c784d21fe0ae1c67320336d2c2db478b18c84da83abfd5d3823867dbd1d96879e94784e32885582b9ed7e9dee1cf89e3d82fd6243a1a994da
-
SSDEEP
6144:+G7V0ODkjiI573cZwrLbZO/n6Iwj/qW+eqsZIHW2dlvVb:+G7DJIt9rnZOiI8S1dAgW2rVb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a
Files
-
3580715d7c86780594db686958e1ae6ab69218aa338d04b8ea180de1a178e40a.exe windows:4 windows x86
f5c9b7a925b288e79ed4763b7aa341cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
kernel32
GetVersionExA
GetVersion
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
comdlg32
GetOpenFileNameA
advapi32
SetSecurityDescriptorDacl
mfc42u
ord325
Sections
.text Size: - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata0 Size: - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata1 Size: 264KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jLFefR Size: 4KB - Virtual size: 128B
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE