Static task
static1
Behavioral task
behavioral1
Sample
3692724c6c6208acdd9db8a4b2cf7adb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3692724c6c6208acdd9db8a4b2cf7adb.exe
Resource
win10v2004-20231222-en
General
-
Target
3692724c6c6208acdd9db8a4b2cf7adb
-
Size
70KB
-
MD5
3692724c6c6208acdd9db8a4b2cf7adb
-
SHA1
58de076c2f5c2dda9e00d14a297fbff3160b523a
-
SHA256
50644758dd298eec64d6572a9cb3d4a129f52f4e40b6cf0ffa0b80bccafaed20
-
SHA512
ed8d69f0c21e6074c0e678da4fc5a04cf016e6c3e61e7ac7a49a2bfb4f5102bdb70a00bd69c609d6a157b1c83f4782476e67542f90d07ccea44b02e2d839c4f5
-
SSDEEP
768:Edskb6E3ulbftsgT0z7GDkmKV2KljK1sQbAQusQZ7uuK3P1s/e/NVP9umROF4HQ8:Eem3ulb1sggnyC9csSA+vdsVESYWNru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3692724c6c6208acdd9db8a4b2cf7adb
Files
-
3692724c6c6208acdd9db8a4b2cf7adb.exe windows:4 windows x86 arch:x86
573a8e3002c3a49e385a632af519e901
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE