Static task
static1
Behavioral task
behavioral1
Sample
3becb703c679f646f0dbacc8329ac523.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3becb703c679f646f0dbacc8329ac523.exe
Resource
win10v2004-20231215-en
General
-
Target
3becb703c679f646f0dbacc8329ac523
-
Size
11.6MB
-
MD5
3becb703c679f646f0dbacc8329ac523
-
SHA1
e91bcf9a93632d990a1bc92841563f3dfaf06254
-
SHA256
fa37e1684121fd8402d363ea155522c170b7b160da6e558537425308c258723b
-
SHA512
59a1e62e2eeebc8a3599412e3bc3dadde97ad3cf509b68adcd5b06099c1381f067d1584ff12da39ace3f90320b331ebb33572d7f76f7d363f996048c49d3dede
-
SSDEEP
196608:sEj1qL74cDVpJ4fyhwz1ZkQ3mc1QmEeqjApFh9z2ITusW/9FqK9dVNz2KBphvo:Fqkkp+CerJ3d1Q6/NYAgdVFfhvo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3becb703c679f646f0dbacc8329ac523
Files
-
3becb703c679f646f0dbacc8329ac523.exe windows:6 windows x86 arch:x86
f0514ef412c597e6b8b1aadfcda74ed3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpCloseHandle
kernel32
GetModuleFileNameA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
advapi32
AllocateAndInitializeSid
shell32
ShellExecuteExA
ws2_32
htons
ntdll
RtlAdjustPrivilege
urlmon
URLDownloadToFileA
Sections
.text Size: - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wdw0 Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Wdw1 Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ