Static task
static1
Behavioral task
behavioral1
Sample
2934dcc2e1f4f20d4d8ea21950c319cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2934dcc2e1f4f20d4d8ea21950c319cf.exe
Resource
win10v2004-20231222-en
General
-
Target
2934dcc2e1f4f20d4d8ea21950c319cf
-
Size
92KB
-
MD5
2934dcc2e1f4f20d4d8ea21950c319cf
-
SHA1
8048e412509cdd054e855a7395e0f0e04cee3d30
-
SHA256
379bd11742a1ee3c8c6ba3cbeef201f0e34f4ab94cab765e3b79c8270a729d03
-
SHA512
722d75fb3b5131bdc661d8edcd25373078804820b4083527523dc9474066cc2c257c918117a0a6720fe777d659df75e2e6de09ffbf6d27f57e87c3eb605c36cd
-
SSDEEP
1536:rSoJYu3UH2BB64VsXl0/QB1lHCi7UbkTMKxIluJkdqR4YY:rSoJ93mk7WUQJHR2uJkUR4p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2934dcc2e1f4f20d4d8ea21950c319cf
Files
-
2934dcc2e1f4f20d4d8ea21950c319cf.exe windows:4 windows x86 arch:x86
825c8c962f92ba4a57dcf7ce6e244ffa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
HeapFree
lstrcmpA
FindClose
FindNextFileA
UnmapViewOfFile
Sleep
FindFirstFileA
lstrcpyA
FreeLibrary
VirtualAlloc
GetProcAddress
LoadLibraryA
GetVersionExA
CreateThread
lstrcatA
GetFileSize
GetCurrentProcess
CreateProcessA
WriteFile
LockResource
LoadResource
FindResourceA
CopyFileA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemTime
HeapAlloc
GetCurrentProcessId
GetVersion
GetEnvironmentVariableA
CloseHandle
CreateFileA
GetProcessHeap
CreateFileMappingA
MapViewOfFileEx
GetModuleFileNameA
SetPriorityClass
GetModuleHandleA
ExitProcess
TerminateProcess
user32
wsprintfA
advapi32
RegSetValueExA
RegFlushKey
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
GetUserNameA
ws2_32
bind
connect
htons
inet_addr
gethostbyname
socket
inet_ntoa
recv
listen
send
htonl
WSAGetLastError
__WSAFDIsSet
select
ioctlsocket
WSAStartup
closesocket
accept
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ