Static task
static1
Behavioral task
behavioral1
Sample
3af647d5422cbd00c2d6b2e76bc50ca1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3af647d5422cbd00c2d6b2e76bc50ca1.exe
Resource
win10v2004-20231215-en
General
-
Target
3af647d5422cbd00c2d6b2e76bc50ca1
-
Size
65KB
-
MD5
3af647d5422cbd00c2d6b2e76bc50ca1
-
SHA1
380e2a751eccedaf87fa6d53d9b3816b7da9bce2
-
SHA256
d00a86cd1509f7a12c59a65fba71ab64c800052fc0e2949e275d7e8018dafaf5
-
SHA512
0da78a42252da4bf915b31f5177aa88b3ddce48da462249ed23bb39e1113646f8ec60e378bf4d9650820f7221657d9b6e549e1bcf973bab54bb9c6d7705f44c0
-
SSDEEP
384:nmn4JiEzfiEOx2KelzOtEj1s/44444444444444444444444444444444444444r:k/EzfcYzOSJsR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af647d5422cbd00c2d6b2e76bc50ca1
Files
-
3af647d5422cbd00c2d6b2e76bc50ca1.exe windows:4 windows x86 arch:x86
9f92853a74faed7466fce8d7d7eb1198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord541
ord6143
ord801
ord858
ord2818
ord535
ord537
ord939
ord860
ord800
ord2915
ord5572
ord823
ord825
ord5861
ord540
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
rand
time
localtime
mktime
_mbscmp
__CxxFrameHandler
sprintf
__getmainargs
kernel32
GetWindowsDirectoryA
OpenMutexA
CreateMutexA
GetSystemDirectoryA
GetTempPathA
FlushFileBuffers
SetFileTime
SystemTimeToFileTime
GetSystemTime
CloseHandle
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
shell32
ShellExecuteExA
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCrackUrlA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE