Static task
static1
Behavioral task
behavioral1
Sample
797dab713a6848864843ef74ffcd8200.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
797dab713a6848864843ef74ffcd8200.exe
Resource
win10v2004-20231215-en
General
-
Target
797dab713a6848864843ef74ffcd8200
-
Size
52KB
-
MD5
797dab713a6848864843ef74ffcd8200
-
SHA1
6e4a62ab1a18083541d90704b894ccd6e2124c33
-
SHA256
62efd23c5585eb502f46d492d81588cb5eb3009b454757a1711d914c5725059f
-
SHA512
4ab2d5c8b817fea74dcb24afe88cd883314b1e617f06bae14df31cb964f42e24b415a5e94936c46c01487d8479a40a50a06127fa7df8833eaf76648c6a1a1797
-
SSDEEP
768:Zy4d2SqpOWJgAFtUeuWtjIoLeuY5/UdhsyF7WNawfswRz/+9Lc8U:Zy4d2SqpFEeHtjIUXF7WNawfsUKLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 797dab713a6848864843ef74ffcd8200
Files
-
797dab713a6848864843ef74ffcd8200.exe windows:4 windows x86 arch:x86
a3000cc2971c4dfff97563572f9b1e89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
lstrlenA
lstrcpyA
ReadFile
WriteFile
CreateFileA
CloseHandle
GetFileSize
lstrcatA
SetFilePointer
SetEndOfFile
Sleep
DeleteFileA
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
lstrcmpA
SetThreadPriority
GetCurrentThread
CreateThread
ExitThread
lstrcmpiA
WaitForMultipleObjects
ResumeThread
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
user32
wsprintfA
wvsprintfA
CharLowerA
ws2_32
WSAGetLastError
socket
connect
ioctlsocket
select
__WSAFDIsSet
inet_addr
gethostname
gethostbyname
inet_ntoa
htons
send
closesocket
sendto
ntohs
WSAStartup
recv
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
atol
strchr
_stricmp
_strupr
strstr
memset
atoi
memcpy
free
malloc
fclose
fwrite
fopen
strncmp
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE