Static task
static1
Behavioral task
behavioral1
Sample
783ef0788100ef5a80bdc7c5bede604b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
783ef0788100ef5a80bdc7c5bede604b.exe
Resource
win10v2004-20231215-en
General
-
Target
783ef0788100ef5a80bdc7c5bede604b
-
Size
40KB
-
MD5
783ef0788100ef5a80bdc7c5bede604b
-
SHA1
e586335aaa539683e793f7aaf4e17cd37a27af54
-
SHA256
cb19e593ebf32bf757ee9ad40923e047926c746f2cd7cee38539ee732cba965e
-
SHA512
c62d5585315c3309d1402d0c561b5b61206ae02c7a050e7a2143c8a683e2a4d8d8a582ce522432582572ade3404f7d645e2c19406494c553c34541458313d898
-
SSDEEP
384:/LjuhDXaA296cO9e/DwmxzKLgzFFd5ZjvMQWxTR9iYndoXcoWfJ3:fkDj2emZxzlHd5MnisCcXR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 783ef0788100ef5a80bdc7c5bede604b
Files
-
783ef0788100ef5a80bdc7c5bede604b.exe windows:4 windows x86 arch:x86
0594c3b9185fe12ced4f43b656bb9ca0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
HttpOpenRequestA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetCloseHandle
InternetConnectA
InternetReadFile
mfc42
ord2725
ord4079
ord4698
ord5307
ord2396
ord5302
ord5300
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord3346
ord5289
ord5714
ord2985
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord3081
ord2976
ord3830
ord5199
ord1168
ord4234
ord2379
ord755
ord470
ord1089
ord801
ord5572
ord541
ord4171
ord922
ord4278
ord6663
ord5608
ord5861
ord6883
ord6143
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord941
ord2764
ord4277
ord858
ord939
ord924
ord1200
ord2818
ord540
ord537
ord1228
ord535
ord860
ord5583
ord800
ord825
ord354
ord823
ord665
ord2915
ord1576
msvcrt
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
strrchr
fprintf
fputs
exit
time
srand
rand
__p___argc
__p___argv
sprintf
fopen
fgets
fclose
atoi
strchr
_except_handler3
_access
strncpy
__set_app_type
strstr
_mbscmp
atol
__CxxFrameHandler
_mkdir
_strnicmp
_setmbcp
_itoa
kernel32
SetEvent
GetLastError
WaitForSingleObject
CreateEventA
CloseHandle
LocalFree
lstrcpyA
lstrcatA
LocalAlloc
CreateMutexA
GetPrivateProfileStringA
GetFileAttributesA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
CreateDirectoryA
CopyFileA
GetWindowsDirectoryA
WinExec
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
SetCurrentDirectoryA
Sleep
ResetEvent
GetModuleHandleA
GetStartupInfoA
user32
IsIconic
DrawIcon
GetSystemMetrics
wsprintfA
SendMessageA
GetClientRect
MessageBoxA
advapi32
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ