Static task
static1
Behavioral task
behavioral1
Sample
253d09978322865776341262fb6faa61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
253d09978322865776341262fb6faa61.exe
Resource
win10v2004-20231215-en
General
-
Target
253d09978322865776341262fb6faa61
-
Size
164KB
-
MD5
253d09978322865776341262fb6faa61
-
SHA1
76163271afb7497a0f47ba78553cc8dfa5ec9f4b
-
SHA256
fdbd3303441f7c9824396c4ddb6264985e222b03f7c81461437bd1f91bf22452
-
SHA512
c0f1093a82907ce7ffb3c8e5922d4a1931b4ad724b42c993714d540720aa05c9f008ab04c82fcdec66173a94a89800a185cd9b1f7e132146210a1b6e922c2266
-
SSDEEP
3072:vecfyc98W/w3w4wTDQo6vEaZ97fwjwNGL9w0LTGXgY6/4WtG9dqAg4dJ2RlDEY:vecfx98W/wgB0vEa/zGCGCXM4UOdqjE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253d09978322865776341262fb6faa61
Files
-
253d09978322865776341262fb6faa61.exe windows:4 windows x86 arch:x86
72562c21745830d31343814dda230283
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
FtpPutFileA
user32
GetKeyNameTextA
gdi32
CreateDCA
advapi32
RegSetValueExA
ole32
OleRun
oleaut32
SysStringByteLen
Sections
.text Size: 158KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE