Static task
static1
Behavioral task
behavioral1
Sample
1dd94c411af9d0f954c0d8ed7f0a6da8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1dd94c411af9d0f954c0d8ed7f0a6da8.exe
Resource
win10v2004-20231215-en
General
-
Target
1dd94c411af9d0f954c0d8ed7f0a6da8
-
Size
9KB
-
MD5
1dd94c411af9d0f954c0d8ed7f0a6da8
-
SHA1
fddeafef7598448b160408919e31e7efb98f0cf9
-
SHA256
d6ad05a1c4da781d6023b5bba822f23736c51233f60de83428b512a7e2eb0f83
-
SHA512
668ba81e4b2970b15a9092514f9e8dc35618c1a2c8fe6a2f927a1097d0ed2755a0c0e3a7a3f5e9eeb6c13b3abf7c67a0da2b34a2cdf9e9bcd2b7deec3a972a8a
-
SSDEEP
192:WK55wGd+kg3fQyjl2DkWNbku7tQsiIV14Y:HTwVkg3fQu2YUQiV14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dd94c411af9d0f954c0d8ed7f0a6da8
Files
-
1dd94c411af9d0f954c0d8ed7f0a6da8.exe windows:4 windows x86 arch:x86
71235c0313f8a3cb753facf3ec1e8ae4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
time
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
toupper
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
srand
_controlfp
strstr
??3@YAXPAX@Z
sprintf
strcat
_snprintf
printf
atol
strcpy
strlen
memset
_except_handler3
memcpy
__setusermatherr
_itoa
wininet
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
netapi32
Netbios
kernel32
SleepEx
GetCurrentProcessId
GetStartupInfoA
CreateEventA
GetLastError
OutputDebugStringA
GetTickCount
user32
MessageBoxA
shlwapi
SHSetValueA
SHGetValueA
Sections
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE