Static task
static1
Behavioral task
behavioral1
Sample
58d36a337f7ada24b0af5e4d8207082b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58d36a337f7ada24b0af5e4d8207082b.exe
Resource
win10v2004-20231222-en
General
-
Target
58d36a337f7ada24b0af5e4d8207082b
-
Size
60KB
-
MD5
58d36a337f7ada24b0af5e4d8207082b
-
SHA1
aa215e7705bc1798b3bccf99b24aa9d3d2fa868d
-
SHA256
00f3722d8b6ae8707f5fb552fd46c68df4ba1c073f1c3c2452af526d70c94959
-
SHA512
a66c9743caa8ec9da1875f5238a9a94ce62ec3f2c950d84b2533a5a5e6076858fe3bfabaa6c10bd8e3556de4863ffda3fce57f255f0f47aeeec287b7e1fb77ad
-
SSDEEP
768:09eOHDvF+c+z3ZTIWYvzBWn/TwxiTDPFRrLTrLNwkBA22/Yg:chvF+c+zpTIWvn0oDznTnY22/1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58d36a337f7ada24b0af5e4d8207082b
Files
-
58d36a337f7ada24b0af5e4d8207082b.exe windows:4 windows x86 arch:x86
6223b691bf9996cd4742922a9d9fc312
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoA
FtpSetCurrentDirectoryA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
kernel32
GetStringTypeW
MultiByteToWideChar
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle
WriteFile
CreateFileA
DeleteFileA
WriteProfileStringA
CreateDirectoryA
GetACP
GetWindowsDirectoryA
ReadFile
CreateThread
GetVersionExA
GetStringTypeA
LoadLibraryA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
GetCPInfo
GetOEMCP
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetSystemDirectoryA
HeapSize
TerminateProcess
LCMapStringA
GetProcAddress
LCMapStringW
VirtualQuery
InterlockedExchange
HeapFree
HeapAlloc
ExitProcess
GetLastError
MoveFileA
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
user32
DialogBoxParamA
GetDlgItem
SetDlgItemTextA
wsprintfA
SendMessageA
MessageBoxA
EndDialog
ReleaseDC
EndPaint
GetDC
BeginPaint
gdi32
GetDeviceCaps
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteExA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ